I was incorrect about one aspect of this.
Regardless of how you distribute your plugin, if your plugin contains uses native libraries - .dylib files - that you have wrapped, you will need to code-sign and Notarize those files.
It looks like the Keyshot and Maxwell plugins are having this issue. There is a temporary (if distasteful) workaround listed in those topics.