I'm not a fan of EV certificates, but with the stricter rules in Windows 11, we had to make the decision to sign the binaries we ship. So starting today we sign all binaries using an EV certificate. We started doing this with the hotfix builds 5.10.3 and 5.11.1 we uploaded today.
The designer exe, cli exe's, all DLLs we ship, the VSIX installers, the nuget packages and the installer itself are now signed.