Comment by woadwarrior01

Just the default macOS sandboxing entitlement[1], which is mandatory for all apps on the Mac App Store, and optional for notarized apps.

[1]: https://developer.apple.com/documentation/xcode/configuring-...