> I’m also surprised at how little noise this change made even within the information security community. It speaks volumes at how little digital signatures are used to proactively enforce the integrity of software at load time within the majority of the ecosystem (again kudos to Intuit).

Or more likely anybody caring about signatures would have updated the binaries already well before the 2019 date when these certs were supposed to be distrusted.