[RonanTheGrey]

I guess a super obvious question is, why do they do this instead of having a robust antivirus ecosystem?

I mean I guess I already know the answer, "marketing". "Look, macOS doesn't require antivirus!"

Personally I don't want Apple verifying or revoking anything. I bought the computer, it's mine. You don't get to tell me what I can run, period. Inform me, sure, give me links to go learn why you don't want me to run something, sure. Don't prevent me from choosing to do with my machine what I want.

[tatersolid]

> I guess a super obvious question is, why do they do this instead of having a robust antivirus ecosystem?

Enumerating “all possible badness” is basically impossible, which is why AV software really doesn’t work. Every ransomware attack you read about in the news bypassed up-to-date AV software.

Enumerating “known-good” entities is actually a tractable problem... this is what vendor-signing does. Even Google and Microsoft understand this and have had code-signing infrastructure in place for decades.