Probably all of them? On modern versions, Gatekeeper still adds a bunch of milliseconds and possibly a RTT network request to Apple before the first launch of many apps; although I think Apple's binary checking is cached for 24 hrs or something.