In my case, I found there was more resistance to installing the unverified package on Mac/Windows than I expected. Not developer, but user.
Discussion
Yes, good point.
On Mac I don't have a solution right now.
On windows https://signpath.org/ supports open source projects, Awesome from them!
Unfortunately windows gives warnings despite a valid certificate (if the project is small) ...