So that people could not bypass DRM (Digital Rights Management, not Direct Rendering Manager). And signing the firmware would not help because with source code it is easier to find vulnerabilities in signature verification code. Though they still could publish the firmware partially.