For now that's the case, but since the introduction of GateKeeper Apple is slowly but surely trending the default configurations to make it more and more difficult to run software source outside of their own app store.

I believe the defaults now extend to software sourced outside of the app store must still be notarized by Apple. This impacts developers more than consumers I would guess, but certainly requires more effort from developers to create and distribute software.