It is signed with a valid developer ID associated with the same LLC mentioned on the site (and that owns the domain), so you can be reasonably certain that the app you are running is the one that we (I) created.

It is not yet notarized, but only because of my own ignorance of the implications of that. (In my defense the notarization thing is a relatively new policy.)

basically it is just:

   xcrun altool --notarize-app --primary-bundle-id "com.your.bundleid" --username "username" --password "password" --file "/path/to/installbundle"

read the doc here [1]

Wait for apple to approve it.

Then staple it.

[1] https://developer.apple.com/documentation/security/notarizin...

Thank you. I appreciate that you took the time to post that.