On OSX you actually have to whitelist software as a user. If something doesn't come from an approved developer, user has to say "Yup, I really do actually want this to be able to run"
(unless we're talking things installed through homebrew, pip, gems and whatnot, but those aren't likely to be used by inexperienced users)
