It seems the bundled shell scripts get treated differently by the sign / notarisation script depending on their location. As a result, some have a signature but no notarisation, and some have neither signature nor notarisation. I'm not sure if this has any implications.
See Screenshot from Apparency