As a power user, disabling something in the CLI once rather than approving every app is more convenient.

There’s no way they can prevent it entirely unless they make their own developers sign their apps before running test builds, as well as every other developer. Doing so would be so hostile that people would stop developing for the Mac.