You can’t use it to distribute apps You can't or you shouldn't? Because I have open source applications installed that are definitely not paying the USD 99 subscription. I'd say that's the case for most if not all of the Apps I have installed that didn't come already with my Mac. Isn't lack of control of the developer's certificates a risk to the security of apps installed with those certificates? or even a push to distribute unsigned apps?

Apparently I have to pay the 99/year subscription to be able to manage my certificates?