DuckDB 2.0 can trust your own signing key. Sign an extension with OpenSSL, host it in an S3-compatible bucket and install it without -unsigned.