MacOS uses a different file system than Windows, and making an MacOS-App requires setting a special flag on the file system that does not exist on a NTFS-based drive.
Theoretically it is possible to deploy to MacOS from Windows and then use a filesystem editor to create that flag when copying to a MacOS drive - but practically that is beyond most users.
So it is much easier to deploy to MacOS from an MacOS computer as that automatically handles the flags.
and if you are on a MacOS computer, you can either use the default encryption or any MacOS-Based security wrapper.