Valid concern, yet a potentially solved problem. For code signing at least. Chexk out Time Stamping.

More info: https://sslinsights.com/code-signing-time-stamping/