Have you met Microsoft?

This is the organization that pushed code-signing as their security posture for a decade.