It definitely bypasses signature checks on macOS and Windows. I don't know if that's actually a bad thing for security, though. Notarization and code signing has hardly posed a problem for malware on either platform so far.
It's big business. They buy EV certs from what I've seen and no one in the industry cares about anything but the money.