Comment by ashikns

Video by GN has a little bit of info (but not a lot). Basically they made it so that the pipes only accept input from MSI signed software + the pipes can only invoke MSI signed executables.

https://youtu.be/Eck8NnoaD4M