It doesn't need e.g. code signing or anything else of the sort.
To be clear, I think all of this is a massive overreach - my point is only that you can achieve the claimed aim with far less invasive means.
That, if anything, makes the chosen idiocy even more troubling to me, as either they're incompetent, don't care at all about the implications, or there are unstated aims.