Windows dev here. Not to disagree with you, but I also have to buy an Authenticode certificate just to sign my assemblies so that Windows doesn't show a scary popup when the user starts my application.
Ah, and I also have to buy another certificate for HTTPS so that the browsers don't show a scary popup when the user opens my website.
Yes, my app is Java so I would also have to pay for a Windows cert. I have none right now and would love to not feel so attached to the $300 a fancy cert would be.
For HTTPS I manage with LetsEncrypt. Wouldn't that work for you?
As an iOS developer I justify it as the cost of doing business. However, unlike you I sell my apps so the annual cost is justified. I think Apple should have an "Open Source" certificate that comes at no cost but the source code has to be made public somewhere.
I guess EFF should check if any GPL-licensed software is shipped with Mac OS (such as Apple's antique bash version). Because AFAICT, a requirement for notarization, or any other condition on top of GPL for that matter, is incompatible with GPL.
The free developer account does not allow you to notarize apps. And Apple gives no free passes to open-source apps. Everybody must pay.
I'm still debating if I'll renew the certificate.