For me, I accept that there's a tradeoff between being able to revoke the signed status of an application, and doing a certificate check at launch time.

And you're already trusting Apple with a bunch of stuff, so one more thing isn't that much worse.

But yeah, it's still creepy, and ripe for abuse.