Does Apple really log every app you run? A technical look
I see no reason why OCSP checks on developer certificates cannot be encrypted.  This whole "oh no there could be a loop for a SSL cert check" argument seems like gaslighting. Why can't the client know if it wants to access an OCSP server using HTTP or HTTPS, and default to HTTPS when possible?