> Apple claims that the process is extremely tolerant…so does it try to accept everything but blatant malware? From what I understand, the most common use case

> Apple claims that the process is extremely tolerant…so does it try to accept everything but blatant malware? From what I understand, the most common use case here is to match against known malware inserted into an otherwise normal release, either from an infected dev machine or by way of an attacker coopting stolen credentials. It's not going to guard against truly novel malware for obvious reasons, but the vast majority of malware is a repackaging of stuff that's already out there.