Windows does what you're suggesting on several layers. Default browser warns about downloads before downloaded, smartscreen prompts about running unverified app

Windows does what you're suggesting on several layers. Default browser warns about downloads before downloaded, smartscreen prompts about running unverified apps, and UAC prompts a final time.