All this ranting is based on a lot of speculation about unreleased code, which has been promised to be released very soon. It may turn out to be a whole lot of worry over nothing.
But if you like fretting and worrying, another possibility to consider is the (expensive) option to submit the INF to Microsoft's WHQL program. If Microsoft digitally signs the INF, then official Arduino would be installed without the unsigned driver warnings, but clones (who don't copy the VID/PID) would get the unsigned driver warning if they change even 1 byte anywhere in that INF.