Stuxnet was signed, but not by any governmental entity (the certificates were stolen from hardware vendors). There would be no reason for Kaspersky to trust thi

Stuxnet was signed, but not by any governmental entity (the certificates were stolen from hardware vendors). There would be no reason for Kaspersky to trust third party certificates, so unless Kaspersky manages to insecurely store their private key(s), it's a very good measure. Of course, iOS has AMFI which is supposed to enforce code signing, but it doesn't always work...