As far as I have experienced: Signing and Notarizing is pretty much required for running your app on Catalina ...
Otherwise the user gets a notification about the application and installation/running it, is refused.
I forgot what the message was.
I'm using a small tool I wrote, since there are so many steps.
When ready for distribution, I have the application signed and the DMG notarized (and stapled).