I think the feds might get to him first because the unfortunate reality is that the world is full of arseholes. One of those arseholes will surely use this system to distribute malware, and that malware will be signed with this guy's certificate. Which will lead the cops back to this guy.

I have a feeling that apple will have to wait their turn on this one. It's only a matter of time before the inevitable happens.

I've developed a lot of Java desktop apps and they use Apple Automator to start. This way I still get access to the disk without having to do the notarization.

If he has problems with Apple, it would be unfair compared to what is possible with Automator.