Paying without Google: New consortium wants to remove custom ROM hurdles

I really want Europe to succeed but I keep thinking the tpm/trust zone keys are going to be a killer here. We need something akin to DNSSEC key ceremonies, combined with the CAB forum to police who gets admission.