As long as Apple's glorious code signing scheme can still easily tricked by a single xattr call [1], I'm fine with it. I've just got a feeling that that won't be forever.

[1] https://github.com/nikitabobko/homebrew-tap/blob/main/Casks/...