Also: Are there signed windows binaries available for orbit?

Unfortunately, not yet but we plan to implement that soon.

Nice. It probably wouldn't make a difference with Defender Smartscreen during installation, but it sure would be good to have a signed binary