[AnaniasAnanas]

That still does not solve the issue with OpenPGP signatures though, does it?

[avar]

It does, because a tag pointing to the malicious content wouldn't hash with sha1collisiondetection's modified SHA-1, just like you can't add the SHAttered PDFs to git.