Any account can sign any (same) piece of software. Of course Microsoft could detect the it's signing a software related to a banned signed and ban the new account. So veracrypt (and wireguard) is stuck.

It's outrageous. MS is simply enforcing some Government crackdown on encryption software that would interfere with backdoors.