There ought to be no protection reduction from using disk spanning in apply: all data files extracted in the unsigned .bin information bear SHA-one verification (supplied dontverifychecksum is not employed). The SHA-one hashes for this (along with all other metadata) are kept within Setup's EXE, which can be protected via the digital signature.Iden