I spend a larger part of each day than I'd like making sure that abusive media requests are unaccounted for (but not blocked) in OP3 and dealing with spammers abusing my open redirect, with no employees and no compensation for this time...
...and I would still choose this system (the "classic" podcast system) 100 times out of 100 over a system where media requests had to be signed.
