[sipefree]

The real point is that in any security architecture, at some point you end up trusting someone.

[ajross]

No one is complaining about signed/certified binaries from a security perspective. It's the process behind the signatures and certification that is at issue.