Are there any plans for signing the CLI "op" binary itself (instead of the download)? As LittleSnitch reminds me, the binary itself is unsigned and could be modified after the initial download and check. It would make the entire setup more robust and e.g. allow LittleSnitch to check if the binary is still valid when trying to establish a network connection.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided