They try not to, but it certainly seems like Notarization is more to be able to disable malware after it's detected than preventing it from being signed at all.