This is because of hardened runtime (and its associated entitlements), which is required for notarization.
You can read from
or jump directly to a solution