Responded to @kasparsd:
5. While this proposal addresses signing and trust, it does not solve directory name isolation for plugins and themes -- that would require a separate solution entirely.
What do you think? Is this simple enough to encourage adoption? What could be improved?