Earlier quoted context omitted.
Anything you compile on your own system you can run. This only affects downloaded binaries.
Thanks for confirming the nightmare.
I can run any open-source software I want. Other people can't run my precompiled binaries unless I opt into an attestation system that lets the OS respond to and pre-emptively block binaries from developers found to be issuing malware. Open source is unaffected.
I seriously fail to see what is wrong here.