I suppose I could have wrote that a single .o file can be made an executable by gcc if the .o has a main function.

Nearly any file can be set as an executable, and surely a bash script set to launch an un notarized app in your application folder wouldn't magically bypass the gatekeeper security prompt for that app.