Sort:  

My blog post is a hypothetical proposed solution to this:

The wallet code which underpins the whole security of your account is sent to you by the server(s) belonging to steemit.

If the server has been compromised, an attacker can modify the code said server is sending to your browser.

And a follow-up to a challenge to my proposal:

even distributed data can be compromised when keys are stolen. In general my impression is that we are still moving security rather than solving security

The tree (chain) of trust can probably solve that.