I always thought the signature was more about attribution rather than security. It's the thing that keeps you from later claiming that you had no knowledge of the transaction.