The updater doesn't check the certificate of the updated installer, it just executes whatever.