[frankiewarren]

I don't understand the "Move to Trash" default for Apps that are unsigned if your default is to only run signed apps.

I think the chances are greater that a user intentionally downloaded a piece of software that happens to be unsigned rather than unintentionally downloaded malware. Wouldn't it be more appropriate to prompt the user something along the lines of "This application was not created by a trusted developer. Run anyway?"

[danbee]

Most users don't read dialogue boxes and will just click on 'Yes'.

[frankiewarren]

I guess that's true, but they already take a similar approach with the "This program has been downloaded from the internet," box.