Is this is meaningfully different than the risk to any engineer working in security on ~central infrastructure? > even if you don't have the keys you may still

Is this is meaningfully different than the risk to any engineer working in security on ~central infrastructure? > even if you don't have the keys you may still control the implementation The sorts of places that care about remote attestation also care about insider risk.