How does AirDrop retain "Developer Verification" information? And, can this be done with other methods?
Apps are actually containers, if the container doesn't contain a verified developer certificate then you will see that message pop-up when you try to open the app.

If you right click and select open it will still let you open the app, irregardless if it is from a verified developer or not.