The Q3 VM compiles native code that is unsigned, which since Tahoe (possibly earlier) requires an entitlement to be set in order to execute it.