In short, the idea was to move signing to a highly secured Linux server, and sign builds through an API as part of the build process. It was initially used for signing XPIs and APKs, but by the end of 2019 we had migrated all non-macOS signing to it and retired the old Linux signing servers. We've gone from signing nothing to signing nearly everything in some form.