Somewhat telling that all the affected devs mentioned are security-related tho.

For what it is worth, it's about signing stuff like device drivers. Fewer indivual/community projects that need that.