Because the reason webp/webm is trash is that it uses proprietary codecs, which some software companies don’t want to include support for. It’s google’s attempt to control every format used on the web.

We already have JXL, which is better than webp at everything it does, it’s not proprietary, and the main reason it’s still not widely supported is because google spent years trying to bury it and intentionally not offering support for it and prioritizing its own webp.

It’s not flawed at all. But its purpose isn’t actually to secure anything. Its purpose is to complicate the installation of alternative OS and to perpetuate vendor lock in, while sounding like it’s “for your security”. In that regard, it has succeeded.

There is also TPM and Microsoft Pluton, which serve the same purpose.