The code signing certificates that MS requires are ridiculously expensive. It's a cartel of certificate isseuers. It's a downright robbery. We need something similar to Let's Encrypt for code signing.
We (sqlitebrowser.org) have recently started using them for signing our Windows builds.