A. Indeed, that requirement only apply to EV cert (at least for the cert authority I used).
B. That's not always the case with indie developers.
C. Well, it took me. My cert authority was GlobalSign.
> but contrary to the urban legend they are not getting instantly shit-canned by the Defender.
That was not my experience. Try to download an unsigned binary using Edge and see what happens. From what I remember (I'm on macOS, mostly), they are "getting instantly shit-canned".
B. That's not always the case with indie developers.
C. Well, it took me. My cert authority was GlobalSign.
> but contrary to the urban legend they are not getting instantly shit-canned by the Defender.
That was not my experience. Try to download an unsigned binary using Edge and see what happens. From what I remember (I'm on macOS, mostly), they are "getting instantly shit-canned".