It would need to be signed so there would be a way to disable it if needed.

This is essentially the same on MacOS now if you distribute, things built without signature at all only open on the machine they were built, you need to provide even a self signature to get it to open with a warning on another machine.