[darawk]

True, but there need not be a convenience tradeoff. Make Apple the default signing authority, but make it configurable by the user. Normal users need not ever see it, but they retain an opt out if it ever becomes necessary.

[Arnt]

Normal users see that when they're social-engineered into doing something they later regret.

[azinman2]

You can always disable gatekeeper and run some 3rd party version if you really wanted.

[Arqu]

Yeah, I would love that. Don't think that will happen any time soon unless legally obliged to.

[azinman2]

It’s trivial to disable gatekeeper. It’s just a radio button in settings.