Why is self signing a problem? Keychain Access (macOS's password utility) has allowed this capability for years. It's possible someone could self sign malicious things, but I'd consider that a separate - if related - problem.

I suspect they also recognize that applying the GPL would force them to release things they otherwise consider private.