The way I read it, unsigned apps are subjected to scrutiny by some undefined Microsoft-operated "Artificial Intelligence" in the cloud, that talks to your computer and determines whether you're allowed to run it. So presumably, a) signed apps run okay, and b) unsigned apps run only if they're approved by the Microsoft AI cloud thingie.
ah ok, so they ‘can run’ but only if approved- i wonder how many they will approve=- what a way for microsoft to dominate over other companies- either play ball with them or lose their approval for the app-