Hi, fellow dev here. IV (or open source) code signing certificate DOES help you to get over the SmartScreen, but it takes time for it to start trusting it completely (enough "I trust this"-clicks). But, you're right, that it's very annoying to set up + renew often (no longer 3 years max!!!) and it does cost, sadly... IMO the whole SmartScreen / code signing thingie is broken in the core, it only checks the exe file signing, but not the underlying dll's and certainly not anything else that the exe might launch XD