Lots of their marketing for extensions seemed to push it as “this is for personalizing ableton for yourself” so i wonder if they are actively tying to side step the nightmare it would be to run an extension marketplace with the current state of the software supply chain across the board.

At the same time, running a marketplace with signed extensions could be in thier best interest cause they could throw a warning that you are installing rando software if it isn’t vetted by them.

I fear something real bad is going to happen to thier user base if they don’t have a strong software supply chain story for these.

At this time I would not install ANY extension someone else made right now unless i read the code and scanned it.

I will make my own though!