[GeekyBear]

> rather than download, run an obscure command, and then run your software

This also isn't true.

On a Mac (or on Windows) software that has not been digitally signed will show a scary dialog box telling you that software you download off the internet might be malicious.

On the Mac, to bypass this, you just right click the software and pick "Open".

[PaulDavisThe1st]

That used to be true. With the latest versions of macOS, you have to run

   xattr -rd com.apple.quarantine ~/Download/TheDamn.dmg