Thank you Jonas, that is useful information.
I'd like to point out that a malware writer, who stands to make a lot of money from his project, is quite likely to pay Apple a signing fee. On the other hand, I make no money from my project (and don't want to) and cannot justify paying an arbitrary fee to Apple.
While the barrier to be able to sign is no more that a fee, it means nothing !
Davo