Anyone can purchase a code signing certificate. They are cheap and do not involve much validation. Yet Oracle must have determined that disabling execution of unsigned applications increases security.
Does it really, and what is the mechanism that leads to increased security? (other than the fact that any mechanism that blocks a random subset of applications will invariably block some malware too by pure chance)