Would it be possible to sign the package?
So it does not require an exception when installing?
You know, I'm sure that Apple would be willing to grant a free cert here. Do you have any contacts over there?
The certificate is free, AFAIK. Just the ADC membership isn't ;-) That said, upon reading the guidelines, I'm not sure if the installer in its current form would pass the App Store requirements anyway. https://developer.apple.com/app-store/review/guidelines/mac/ Distribution outside the App Store would probably still be OK - but you lose the App Store revenue stream of course. I don't have a membership myself (because I don't build software for Macs), so I can't help you here.
It could be made app-store compliant. I contacted a friend of mine at Apple and he's going to ask around.
App store distribution of Git could be a great thing. The installer could just modify your bash profile, not system-wide settings.
That would be great indeed. Apple does deliver git with X-Code (well, I assume so, because I have it installed and it calls itself "git version 2.3.2 (Apple Git-55)"). But a more often updated version would sure please a lot of people. Last but not least, we really shouldn't teach people overriding OS-level default security warnings. That's just a bad thing. Regardless of the whether we "like" the particular policy of specific vendors or not. The fact that you and I can actually make informed decisions about that is almost irrelevant considering that literally millions of others can't. Anyway, thanks for your efforts, whatever the outcome.