It's also all-app: they can change their homemade updater to a normal non-hidden updater and have normal signed distribution that doesn't require any of this re-auth.