> OSX ships with "run unsigned apps" completely disabled by default I’m behind the upgrade curve, so I had to look this up to see if it’s changed but it hasn’t

> OSX ships with "run unsigned apps" completely disabled by default I’m behind the upgrade curve, so I had to look this up to see if it’s changed but it hasn’t. The default still allows running unsigned apps without any configuration change. You just have to know how to do it, which is a pretty good sensible default. If you don’t know how, it’s a trivial search away. > so normally that option won't even be presented. Which is why it’s a good sensible default. Most users who don’t know how to work around it won’t bother, and they’ll benefit from it. The rest of us who do know how will take a brief pause to consider the risk before disregarding the warning. The people who will just blanket turn off the protection are either very confident in their own risk assessment capabilities because they should be, or because they wouldn’t be protected by any mechanism whatsoever.