The only way developers can avoid the Vista Unidentified program message is by signing their application. For many small developers signing can be a very expensive solution.
The approach I am adopting is to add a Read Me dialogue to the msi package immediately after the Welcome as follows ...