Comment by augustl

That's correct. AFAIK Catalina will check online for everything, even binaries you compile yourself.