so that no device under any circumstances can be spoofed. what kind of risk is there in crafted signatures if right now you're 100% vulnerable to spoofing without any effort required to produce said signatures?