Man, it's disappointing to hear this has stayed the same for so long. In the future, Apple should sandbox 'preflight' to disallow writing files, and then enforce it as a condition of notarization.