It's so "funny" that macOS helpfully offers to move Servo to the trash bin because it's unsigned.
At least the troubleshooting steps on the download page work: servo.org/download
I wonder what options are available for signing it? Or would that go against a portion of the project's aims?