Let's not ignore the institutional change they drive; attestation and the like is not what it appears.

They can become the next Microsoft with secure boot signing keys for the next Widget, but implemented even less kindly. Yes, one can enroll their own signing keys. Who does?

The frog may say the water is warm, I say they are being boiled

> The resources required to fork and then maintain would be huge

Yes but browser companies have those resources and the expertise.

Microsoft is one of the most able companies to maintain a real Chromium fork, so a Chromium based Edge with actual marketshare puts them in a much better negotiating position than EdgeHTML based Edge that no one uses.

I think a Chromium based Firefox might be better long term than the current Firefox since Mozilla is going to get less and less of a seat at the table until they can get some real marketshare again.