Any method of software distribution which is not rooted in cryptographic author verification against a fine-grained, user-manageable trust store should be put b

Any method of software distribution which is not rooted in cryptographic author verification against a fine-grained, user-manageable trust store should be put bellow the sanity waterline, 20 years ago.