Three years on, this is still a thing, and it’s a mystery why this developer can’t be bothered to sign the application, but the advice here holds.
