If you are a bank, you want to have an authority that guarantees OS hardware signing of a smart phone.

But this authority could be a bunch of cool people like Letsencrypt, instead of only Google.