I think that only allowing Windows to run signed code would be too restrictive. Developers, while annoyed, could handle it, but it would be a headache to end users who aren't knowledgeable. Many people I help with computers don't update their programs and don't want to (due to a new interface or...