[magicalhippo]

> An "ideal" public key signature algorithm would only do what you expect it to do, verify if a signature was produced by a provided public key, and reveal no additional information.

This is the key point.

As you say one can work around it, your spy would encrypt the signature using the recipient's public key for example.

But you have to be aware of the possibility to take counter-measures.