If so, they are executing it badly.

As for every executable being tagged, that is not required. People can build binaries with open tools and other people can run them.

A hash gets created for Apple to play same or different with binaries found to be nefarious somehow. Seems like a reasonable proposition.