Why would Gatekeeper ignore an unsigned application bundle?

Question

I am helping a client package a legacy Adobe AIR application as a standalone application. The AIR compiler outputs a .app application bundle. After compiling an unsigned applica