Comment by LogicX

Not according to the article: “For developers to have run the counterfeit version, they would have had to click through a warning delivered by Gatekeeper, the macOS security feature that requires apps to be digitally signed by a known developer.”

Worked just fine. Developers circumvented it. Should’ve been the red flag.