What's a revoke? Why is it a problem?
It's whack-a-mole- the stores sign their executables with a new certificate, Apple finds out about it, revokes the certificate. When that happens, I imagine the software signed by that certificate will no longer run on the devices the software was installed to.