I would not characterize that as just "clicking a security box for non-notarized apps".

A few days ago I downloaded a non-notarized app. The dialog that I saw baffled me and it took me a while to recall how to run a non-notarized app.

You have to right-click on it and clock on "open", something that should be equivalent to double-clicking, but isn't. That's harder than clicking a security box. Someone with no knowledge might never find out how to run these apps.

We could debate the appropriate level of friction for running this class of software, but GP said:

> Apple has always been far more controlling than Microsoft

Notarization came out with Catalina.

I'm not disputing that. I'm just saying it's harder than checking a box.

Try getting a non-notarized VST to run in your DAW. At least in my experience, even after allowing the plugin in security and privacy it still never loads in Reaper. It's entirely possible, even probable, that I'm doing something wrong. But what a headache.