To that point, what is the difference :-

1. just trusting the cert say for Amazon directly rather than trusting the chain of trust using CA (distrust all the root CA and just trust the cert of Amazon)

between

2. Trusting verified Javascript directly.