[philistine]

I'd argue only the revocation is needed. macOS is moving towards that model: every app requires notarization, Apple provides it without asking questions, but reserves the right to revoke the running privileges of any app. This makes so much more sense.

[sneak]

There are certain apps (like Wireguard) that Apple will not notarize for non-App Store distribution.

Basically, for certain classes of apps, macOS is now already taking the iOS "App Store or gtfo" model.

[zepto]

How does it make sense to allow scams to do their damage before shutting them down?