Everyone needs a defensible root of trust, this goes all the way down to the registrar you use for your domain.