In some rare(?) good news, the developers of VeraCrypt and WireGuard have both told me that they have regained access following their Microsoft account lockouts and can now release updates again.
@brown@zackwhittaker and because of the Notepad++ incident, this is the first time I looked side-eye at an update. Probably the most research I've done on "is an update legitimate?"