Why that mattered more here than usual
When Windows meets a program it has never seen from a publisher it has
never heard of, SmartScreen shows a blue
“Windows protected your PC” screen, and hides the
Run anyway button behind a More info link.
That message means “Windows has not seen this file before”
— not “this file is harmful”. But LanderSync is built for people who
were told, correctly, never to click through warnings like that. Handing
them one on the very first screen is a bad way to start, so the app was
held back until it was signed.
Store packages are signed by Microsoft itself. Not a
smaller warning, and not one that fades away once enough people have
downloaded it — no warning at all. Windows also keeps it updated for you,
so there is nothing to re-download when a new version ships.
Nothing is hidden either way. Every line of source is
public, the installer is built in the open by GitHub Actions, and
SIGNING.md
documents exactly what the app connects to and how your Cloudflare key is
stored. Direct builds are still on the
releases page
for anyone who prefers them — those are unsigned, and they are the ones
that show the blue screen. The Store is the recommended way in.