macOS verifies signatures of all apps. Windows comes close, if you configure enough GPOs, otherwise it just gives you a warning. (If you've seen the "unknown publisher" warning that literally everyone immediately clicks past, that's what I mean.)