IdentTrust is selling EV code signing certificates that are being blocked by Edge/Smartscreen. Is IdenTrust legit?

Question

I purchased an EV code signing certificate from IdenTrust a couple months ago and code I've signed with this is being blocked by Microsoft Edge and Smartscreen.

I've submitted my file to the Microsoft malware scanner to verify that I'm not being blocked due to some fault with my file. The scan passed without a problem:

https://www.microsoft.com/en-us/wdsi/filesubmission

I see that another company reported the same problem back in Feb 2022 and the indication was that IdenTrust's TrustID CA 4 certificate is not valid and thus code files signed with this certificate will not be recognized as EV certificate recognized by Microsoft. Crypt32 (a MSFT MVP) says that "it seems the problem is with the issuer of your EV signing certificate (not with your signature or tool)":

https://learn.microsoft.com/en-us/answers/questions/740378/defender-smart-screen-blocking-valid-ev-code-certi.html
https://learn.microsoft.com/en-us/answers/questions/799594/identrust-ev-certificate-roots-not-loaded-by-micro.html

IdenTrust is still selling EV certificates, apparently without these being trusted by Microsoft which seems super sketchy, and potentially fraudulent (especially for a company whose whole purpose is trust).

I've addressed this with IdenTrust customer support and they've acknowledged that Microsoft does not recognize their code signing certificate authority and that they have no idea if or when this might happen.Even after stating this, they refusing to issue a refund due to a "strict refund policy".

To summarize: an EV Code Signing Certificate purchased from IdenTrust today or perhaps from several months ago is probably no better on Microsoft platforms than a self-signed certificate I could create myself for free.

I have a few specific questions:

1. Is IdenTrust actually recognized by Microsoft as an EV Code Signing Certificate provider?
2. Is the IdenTrust TrustID EV CA 4 or any other IdenTrust code signing certificate currently recognized by Microsoft Edge, Smartscreen or any other MSFT screening technologies?
3. Does Microsoft condone companies or people selling EV Code Signing Certificates that are not recognized by Microsoft technologies?

I see that Microsoft is indicating that IdenTrust is root SSL CA here:

https://ccadb-public.secure.force.com/microsoft/IncludedCACertificateReportForMSFT
https://learn.microsoft.com/en-us/microsoft-365/compliance/encryption-office-365-certificate-chains?view=o365-worldwide

...and Microsoft is also indicating that IdenTrust is a valid certificate authority for code signing here:

https://learn.microsoft.com/en-us/windows-hardware/drivers/dashboard/code-signing-cert-manage

Given that IdenTrust appears to be currently selling code signing certificates that are not actually trusted by Microsoft, I recommend that Microsoft remove these references to IdenTrust from their website and open an investigation into this behavior, if an investigation isn't already in progress.

As we all know, computer security is extremely important these days and having a presumably key player selling a trust related product that they know doesn't work is not very trust inspiring.

--Jeff