The only issue is it can take an hour or more - https://news.ycombinator.com/item?id=21110622 polling for the status to finalize would waste build minutes on your CI.
Split the build process so that you can click "version 1.2.3" and have it notarized (this is doable in Jenkins for example)