but the next OS update can do whatever it wants too, how is this a change? We will always need independent verification and observation of the platform behaviour from the outside.

The distrust _is_ justified, and we should be wary. What is not justified is dismissing the CTF based only on that, imo.