Fair point. The OBS camera extension exposes a sink stream, so any local process can feed it frames. That's how obscam works without its own signed extension. I think the bigger protection is the system extension approval and the camera permission prompts in each app, but it does make the signing requirement feel thin. Without it, I couldn't have shipped this with a free developer account.