Start an
initiative to make it practically mandatory to get every application certified and signed, introduce
strict criterias that must be fulfilled in order to get an application signed, make those certifications expensive (US-$ 350 for an "ACS Publisher ID", plus US-$ 195 to US-$ 560 for the first submission to a test center, plus around US-$ 200 for every following submission), and the introduce the strict policy in the latest version of your operating system that unsigned code is not allowed to do any user interaction. Et voila, you practically killed your freeware scene, as nobody can afford such expensive and time-consuming certificates.