[withinboredom]

And we might ask ourselves: why can’t Google do that? They just need to sign the binary, Google doesn’t have to host it.

[drdeca]

Oh, for sure, I didn't mean what I said as a dismissal. It seems like it could be a reasonable state of affairs for Google to just link to (and sign?) it, but not host it.