> Replace Apple with any CA on the world wide web This is what everyone misunderstands. The Developer ID code signing program is not analogous to web certs. The

> Replace Apple with any CA on the world wide web This is what everyone misunderstands. The Developer ID code signing program is not analogous to web certs. The usage of these certs is entirely different. The brilliant thing about pki is that certificate usage is based on its cryptographic purpose. It doesn’t care about the application itself. It’s actually a good thing that Apple doesn’t just verify the certs on install. The kill switch serves a vital security purpose.