>...but what could prevent this sort of thing? If it's on Windows, probably the digital signature[0] of the installer bundle will flag for invalid/unknown sign

>...but what could prevent this sort of thing? If it's on Windows, probably the digital signature[0] of the installer bundle will flag for invalid/unknown signature. For nix you could verify checksums but for Apple, if it's not in the store, I think it's nigh* impossible to do. [0] - https://docs.microsoft.com/en-us/windows/uwp/packaging/sign-app-package-using-signtool https://docs.microsoft.com/en-us/windows/uwp/packaging/sign-...