> One possible workaround would be to provide a way to add keys from which you would accept extensions.

Then malicious apps will just sideload new keys.