Well, you can just write an installer that uses an elevated cmd anyway. I think conemu does that? (not sure, maybe it is another software) Is unsigned software

Well, you can just write an installer that uses an elevated cmd anyway. I think conemu does that? (not sure, maybe it is another software) Is unsigned software subject to further restrictions by default compared to signed but "unknown" software (sometimes a pain to use with Defender) And I kind of remember there was already other bugs with MS code signing checks? (not sure) I agree this bug probably breaks the (informal/perceived?) security model of some hardened configuration, but that kind of hardening should not be considered completely sound anyway. It's like the UAC that is not to be considered a security boundary, yet somehow useful against casual threats or even just errors. If you download and try to execute random code, you should consider it will be executed regardless of the expected checks and perceived hardening of your system. And you should consider that your OS is full of security bugs absolutely everywhere. Your web browser too (yep, that means JS is an insane threat now). Not really a reason to not fix that kind of things though, but nothing serious enough to loose our mind.