I for one welcome our new OS-level code signature verification overlords. May they smite evil and incompetence swiftly and brutally...except when 'evil' is defined by foreign governments, domestic law enforcement, or fair competition with built-in features.
With great power comes great "you guys better not fuck this up."