Comment by webrender

This is already in place - by default macOS does not allow apps to be installed which do not include a signed Apple developer ID. The setting can be turned off in System Preferences.