If code signed with your key is used to attack Windows then Microsoft can blacklist your key and push that update out via Windows update.

If what we're planning to do becomes impossible then we'll need to find an alternative. Right now I'm not worrying about that too much.