In apple's case its different, software is bundled "free" when you buy apple's hardware. Lenovo Doesn't make software and forces you to pay for Windows.
as a malware developer who used to work for government ( not usa ofc )
we had our malware signed genuinly with digital certificate ( we bought using fake company )
so digitial certificate doesn't protect at all!