Hacker News Reader

It’s what Apple experimented with before they came up with the current entitlements system.

Entitlements are a great system for user applications, but pretty much unusable for OSS system applications as AIUI they need codesigned binaries

Code signing and entitlements are integrated into the binary.

(Restricted entitlements require a provisioning profile which requires a bundle, but restricted entitlements are pretty rare)

They could have designed a system to put the code signature inside Mach-O but they chose not to.

I wouldn’t really say it compares to entitlements