I think the theory is that when the user right-click and select “open”, this is more of a conscious choice. Because of this extra effort, you get the option to go around the default security.

I find this to be a good trade off between running any unsigned binary and complete lockdown. It’s enough of a barrier to make you stop and think, but doesn’t take too much effort to get past.