That just means that they didn't pay Apple or a signing authority tons of money for a certificate. You shouldn't put your trust in that popup and instead rely on other cues to determine if something is malware. Think of it like HTTPS before Let's Encrypt made HTTPS free and accessible to everyone, except tons more expensive. It's a similar situation on Windows. Rather unfair in all honesty but that's how it is. Hope this helps!! :)