This is tangential to your arguments, but code signing doesn't enter the Flash platform until you start targeting native apps instead of the web. Flash has no code signing; only AIR does.