It doesn't matter, right? Because anyone who relies on OV/EV certs has
chosen to rely on OV/EV certs. If we replaced the whole WebPKI edifice with a blockchain, they'd
still make the same decision not to trust the baseline system.
When we talk about the WebPKI being coercively annoying, what we're really talking about are the roots of trust that the browsers have chosen to trust. No browser requires OV/EV.