> It might also be a push to get developers to publish on the App Store (where Apple can be more sure (hopefully) that the apps are safe).

Apps on macOS need to be signed and notarised. Apple has the exact same capability to scan for malicious behaviour and revoke your keys regardless of how you publish. We all know the real reason they want to push apps towards the app store.