Microsoft could add the software to Defender's database of signatures. Or just probably revoke your certificate.
My point is not that they can't do it, my point is that they can't casually do it. It would be Real Work and it would risk major backlash.