It's the one mandating them and not offering acceptable alternatives.
they do offer an alternative, Azure Code Signing (ie cloud HSM). ImageMagick are looking at moving to it. it's free but someone difficult to access, due to the identity verification requirements
The cartel leaders don't sell drugs, street pushers do.
MS just have to sell licenses to sell certificates.