A developer can sign their own kernel extensions, even on M1. It just requires you to initially set the machine into a specific mode that allows it. The people

A developer can sign their own kernel extensions, even on M1. It just requires you to initially set the machine into a specific mode that allows it. The people this puts pressure on is not individuals trying to write or sign their own kernel extensions if they know what they are doing (essentially reboot into recovery and run some some shell commands). It does prevent - Unsuspecting or otherwise ignorant users from being tricked into installing a malicious kernel extension. - Prevent large companies from distributing custom kernel extensions for every day users