I am curious what you mean by "trust in Werner Koch is gone". Can you elaborate?

To be frank, at this point, GPG has been a lost cause for basically decades.

People who are serious about security use newer, better tools that replace GPG. But keep in mind, there’s no “one ring to rule them all”.