I would say it's that any centralised code signing source will inevitably be unleashed in a geopolitical fight at some point, and setting them up in the name of

I would say it's that any centralised code signing source will inevitably be unleashed in a geopolitical fight at some point, and setting them up in the name of security should always bear that in mind.