What does notarization have to do with that? You or ChatGPT or whatever download a signed and already notarized binary.

That was kind of my question, whether it was restricted to downloading notarized apps (which is at least something) or whether they were circumventing that somehow.