The programming notary should be expensive per line.
If a function gets certified and a decent description it can be published for other developers to further scrutinize and use the same.
With user.script or greasemonkey scripts it is kinda expected to read the script before use. Short scripts are easier to check.
Funny example
https://userscripts-mirror.org/scripts/show/179526
If the potentially dubious part can be isolated the notary, the publisher, the other developer and the user can easily review it. It seems much better than the current installing black boxes?