Just to clarify, my demo is very PoC. The longer term vision for zap.store is all devs signing binaries with their own keys.

Fully agree with stronger endorsements. We currently base WoT on contact lists because it's the best we've got - but actively thinking and experimenting with ways of expressing stronger signal