[Wowfunhappy]

> How so? Isn’t this still an option in settings?

No, it's not. Starting in macOS Sierra, hid the "Allow from Anywhere" option in System Preferences.

You can still allow unsigned apps, but you need to use a Terminal command:

    sudo spctl --master-disable

Or you can whitelist individual apps by option-clicking them and selecting "open", but that's purposefully obtuse.

[vinay_ys]

I can still download or compile and install any binary I want. It only reminds me that this was done so and asks me to confirm. Isn't it?

[Wowfunhappy]

Use `spctl --status` to see the status of Gatekeeper.

If Gatekeeper is enabled, the binaries you're downloading must have been signed by a valid developer ID. IIRC binaries you compile yourself get whitelisted automatically.