This was a very helpful and clear explanation. As you predicted, we now have some 10.13 users writing in saying that they are having issues - what's the strategy here for 10.13 support?
How does this interact with the disable-library-validation entitlement? We do have the library validation entitlement but I think that is in error and we could probably remove it.