This is really bad but there are two good security defenses that came out of that forum thread (which is better than not having them at all). 1. Apple revoked

This is really bad but there are two good security defenses that came out of that forum thread (which is better than not having them at all). 1. Apple revoked the certificate already. Thus people that have gatekeeper on are safer. 2. Sparkle (for auto updater) denied the malware infected update. Thus downloading from the main website is not necessarily safer, even with the recent mitm sparkle vulnerability.