Forced software signing should be illegal.

It's not forced, especially for normal software, you just get a popup. It's a bit of a pain to disable the requirement for drivers, though.

I don't think you can install VeraCrypt, at least for system encryption, unless the installer is signed

According to further up the thread, you can if you disable secureboot.

And you mess with your boot.ini and ignore that half your screen is taken up by a TEST MODE banner. Buy a screen twice as big and tape over half of it, I guess.