Protecting users against malware should be the job of XProtect. If a naive user can run malware via right-clicking, they can do it nearly as easily through the Privacy & Security page. All this change does is bring unsigned software closer to outright deprecation, at which point Apple can backdoor app review through notarization just like they do on iOS in the EU.