But what are they doing that's requiring going through settings/xattr, when every other direct download app I've used has worked fine with the right click -> Op

But what are they doing that's requiring going through settings/xattr, when every other direct download app I've used has worked fine with the right click -> Open to suppress the default error about signing?