"Hackers intuitively understand something many computer users don’t--ownership is not about possession, it’s about control...The illusion that Apple users have control over their computers was briefly disturbed this week..." https://puri.sm/posts/apple-users-got-owned/
@kyle yep, gatekeeper is just proof apple users are only renting apple products.
Update: looks like Apple's notary service doesn't send app hashes, it sends info about the *developer* certificate. So they know who wrote the app, not *necessarily* which app it is. If they block an app it would apply to all apps signed by the same cert.
https://blog.jacopo.io/en/post/apple-ocsp/