Entitlements are a great system for user applications, but pretty much unusable for OSS system applications as AIUI they need codesigned binaries

They could have designed a system to put the code signature inside Mach-O but they chose not to.