And so that's why I never liked nor trusted this whole idea of code signing with non-self-signed certificates, especially on desktop OSes. This notarization mechanism introduced a single point of failure: Apple. And now there is concrete evidence of how exactly this is bad.
On a device I own, there should be no parties that are trusted more than myself. It's ridiculous I even have to write this.
On a device I own, there should be no parties that are trusted more than myself. It's ridiculous I even have to write this.