Doing extra stuff to make sure only the signed homebrew launcher can run. (I don't even know how you want to do that... unless you've got the certificate or did something with it... or maybe I'm just stupid.)
The thing is, it's either do that or have no home menu-based homebrew. And it's not even that much work.