I know. I've done that many times. But what the WireGuard guys are saying sounds like it's something very different:
"Because it uses these deep integration APIs, we're only allowed to distribute the application using the macOS App Store (whose rejections, appeals, and eventual acceptance made for quite the stressful saga over the last week and a half)"