Except nowhere is this even implied.

The legal entity here is the Linux Foundation.

As they’ve said, this seems like LetsEncrypt for software signing.

I found out about this project 30 mins ago and honestly it sounds great. it would be awesome for us to roll this out even for our internal libraries.