I wonder if this will lead to a signing service situation like ios where people pay others for certs to sideload apps.

Example:
Image