Consider how well malware and adware has done where the authors can impersonate legitimate developers (remember when people got faux-Firefox as the first Google hit?) or can run distribution campaigns from shady web hosts for years? Notarization and domain limits mean Apple can block malware almost instantly and the developers have to burn a real company identity on each attack campaign.