Yes but the test should be, “does this key have a valid timestamp?” not spin up a VM, set the clock 10 years in the future.

BTW, most commercial installer progtams will apply a valid timestamp if codesigning is enabled. So to save ~$1000 someone decided the tools built into Visual Studio were good enough. Anyone that ships commercial software that does more than a basic install into C:\program files will know to spend the money, it’s worth it.