Many torrent sites have stronger reputation vetting than Microsoft code signing certs.