It's the case as long as you manually recompile them once a week when the code signing cert expires. It is deliberately impractical to actually distribute apps this way.