If they stop providing a signed binary outside the Mac Store (IDK if they did), then this is the only safe way to get it other than a self compile. Add in auto updates and supporting the foundation and it seems reasonable.