Isn't Microsoft switching to Trusted Signing[1] and you can get or you'll have to get the cert from them directly in the future?

Seems not to make the process easier, because apparently your organization has to be more than 3 years old[2] to be eligible.

For the traditional way with a third-party cert provider someone on Reddit made a comparison table[3]. The whole thread is interesting.

[1] https://learn.microsoft.com/en-us/azure/trusted-signing/over...

[2] https://learn.microsoft.com/en-us/answers/questions/2082252/...

[3] https://www.reddit.com/r/electronjs/comments/17sizjf/a_guide...