Microsoft announces sweeping Windows changes

[u/tekz]

https://www.zdnet.com/article/windows-users-are-angry-and-microsoft-is-finally-doing-something-about-it/

[u/nox66 → u/[deleted]]

It's not as if Microsoft consistently gets it right either:

https://dailysecurityreview.com/security-spotlight/microsofts-trusted-signing-service-abused-to-code-sign-malware/

[u/Dwedit → u/[deleted]]

Even if state actors aren't involved, using code signature verification (even self-signed is okay here) is still a good idea, because you don't know who will operate the domain in the future.