You still need to pay the $99 a year though, since you need an Apple Developer account to submit binaries to Apple for notarization (which is required to run them on Catalina.)
If you're not using Developer ID and instead expecting your users to bypass Gatekeeper, that still works in Catalina.
Browsers are supposed to set that attribute. If they don't then Gatekeeper won't be triggered.