[kevingadd]

Signing wouldn't have addressed this because they're creating a new, modified executable. So they just make that one unsigned.