There's also Attack #6, which doesn't get front-line billing in the paper but I think does a great job exemplifying how much of a security theater this whole pr

There's also Attack #6, which doesn't get front-line billing in the paper but I think does a great job exemplifying how much of a security theater this whole product space of "signed documents" is: "We discovered that on macOS, it is sufficient to include a `sig1.xml` [file] without any content to force the application to show a security banner stating that the document is protected by a signature"