Code signing is absolutely disgusting practically and philosophically. It has very reasonable and good intent behind it, but the practical implementations cause great suffering and sadness both for developers (cert management, cost, tools) and end-users (freedom of computing).

It is ugly: https://hearsum.ca/posts/history-of-code-signing-at-mozilla/