Please stop with the hyperbolic strawman. None of "https, sign his binaries, or enable mark-of-web" are "latest performance killing mitigation strategies". Nobody is arguing with 7z's success, either. I don't know where you're sensing that.

These are just reasonable (or even necessary) techniques to ensure the security of the product you're shipping. We ought to know better.