Contrarily, MSFT being the one to approve all code would be good in that it would destroy the current Windows code signing racket that only six companies have access to[0].

0: https://docs.microsoft.com/en-us/windows-hardware/drivers/da...

(thankfully MSFT is indeed working on their own first-party code signing solution https://youtu.be/Wi-4WdpKm5E)