Extension Signature verification possible

[jacobhilsebein]

Seems like per default installing extensions (from open-vsx.org) does not verify signatures of extensions:

2023-07-05 10:07:00.283 [trace] ExtensionGalleryService#downloadSignatureArchive magicstack.magicpython
2023-07-05 10:07:00.301 [info] Extension signature verification is not done: magicstack.magicpython
2023-07-05 10:07:00.304 [trace] Extracting extension... magicstack.magicpython

Is there a way to enable extension signature verification in vscodium?
or is this maybe a feature that needs to be added to vscodium first? as the proprietary 'vsce-sign' tool from microsoft cannot be used here?

Seems like extensions will be signed properly by open-vsx: eclipse/openvsx#543