Why were these not stored in smart cards? JFC Code signing certs should only be issued as hardware certs. That should be part of the certificate policy and Mic

Why were these not stored in smart cards? JFC Code signing certs should only be issued as hardware certs. That should be part of the certificate policy and Microsoft should enforce it.