Double checking if you're sure you want to run `video of grandma.jpg.app` makes sense, prompting for execution for third party code isn't that strange.

The way Apple implemented it, where you can just sign your malware so the signature part is kind of useless, makes it weird, though.