Your point 1 is the elephant herd in the room. If I were a paranoid person, I would think it’s by design - build in a way to compromise a system retroactively.
You should read Ken Thompson's "Reflections on trusting trust". Outsourcing security to a tool which you have to blindly trust, and can't verify is very, very dangerous.
Comments
Your point 1 is the elephant herd in the room. If I were a paranoid person, I would think it’s by design - build in a way to compromise a system retroactively.
That makes no sense
You should read Ken Thompson's "Reflections on trusting trust". Outsourcing security to a tool which you have to blindly trust, and can't verify is very, very dangerous.
You've obviously misunderstood the proposal - there's nothing about this that is "blind trust" at all.
Anything based on PKI which at some unknown time in the future can be leaked or otherwise compromised is “blind trust”.
This is why perfect forward secrecy techniques have been developed.