You don't really need to: You are expected to have more than one notary, so you will only trust the certificate if a majority of your notaries say it's legit. It's actually user-settable: a certificate is considered valid if a "majority say yes" or "at least one say yes" or "consensus is required". Having many notaries reduces the probability of MITM attacks, since the paths from notaries to target certificates are multiple, it's very improbable to MITM all of them at once.

... but I'm not drinking the cool-aid. If they can't spell "kernel" properly, I doubt they are competent to build tablets including a custom build of it.

Here's the list: http://blog.mylookout.com/2011/03/security-alert-malware-found-in-official-android-market-droiddream/

Karma be damned, this is relevant to TFA: