[acdha]

Wouldn’t that be more work than releasing updated signatures? That’s an entire extra code path to maintain versus a routine and trivial operation.

Hector Marcan claims it’s policy, too:

https://web.archive.org/web/20220824111844/https://twitter.c...

http://web.archive.org/web/20211217111414/https://twitter.co...

[philistine]

Apple refuses to sign any OS they deem not up-to-date on iOS. I presume the same thing is coming to macOS soon, with the out that you will be able to install those older versions in the other OS code path.