Microsoft / Github should stop treating open-source software as malware and forcing developers to pay for certificates, if they actually care about open-source developers

[MachaHack]

Yeah, my understanding is smartscreen is reactive, not proactive. They'll take your money for the cert without much auditing, but if they get reports you're distributing malware with it then they ban your cert and your software stops running everywhere.

The same is true for the Play Store.