is it legal to make an installer that would explicitly add a self-signed certificate to be able to add the application?

assuming there would be a way to distribute that installer other than microsoft's store