About the 7zip “issue” (not really an issue)- I, as many here know, use CF only. For CF, when either the installer or the GUI app is run both will be contained.
However if CIS is used (adding the AV component) both will be recognized as valid even WITHOUT a digital signature as both have been previous vetted by Comodo within the AV database and thus allowed.
The CF component alone is without this database asit lacks the on-demnd AV component, so thus an unsigned application is automatically contained.