If my customers wanted this, I would gladly budget for it. But nobody has asked for this, even when I bring it up.
The reason (I imagine) is that people use my software in professional/home studios where you typically have a dedicated computer to run the software. People purchase a computer based on the recommended specs of my software, and some don't even bother connecting it to the Internet after getting everything installed. If they do, they don't download random software from the Internet because 2 or 3 packages is all they need. There just aren't really any attack vectors that things like app translocation, notarization, code-signing, runtime entitlements, app stapling, paying $100/yr to be an Apple Developer member, etc would solve.
So these users are unaware of 32 bit apps breaking on update and also going to the trouble up updating a computer that isn’t connected to the internet?
If you don't have a membership, you're not signing with a Developer ID certificate, so you're already requiring users to bypass Gatekeeper (with right-click + Open or by fully disabling it) to use your software. Those processes also bypass the notarization requirement.
Do you have a source of this?
I was unable to notarize my software with my free Apple Developer ID account, so I paid $100 this year. This question (https://forums.developer.apple.com/thread/121113) seems to be answered "no". I would love to be mistaken so I can treat my family to a fancy meal tonight.
This service requires that the finished application be sent to Apple to be notarized as part of an automatic (and free) process, and that the returned "ticket" be "stapled" to the Mac app before distribution.
My subscription is about to run out in a few months, so I'll let it expire and test this, as it would save a bit of money, and a continuous Apple Developer membership isn't necessary in order to sign apps infrequently.
