Signature validation should not be an optional thing that gets done if people choose to do so. Any sane updater library will mandate it in the library, and forc

Signature validation should not be an optional thing that gets done if people choose to do so. Any sane updater library will mandate it in the library, and force users to jump through hoops to turn it off.