And it's very real problem to workaround (aka, hack the device into faking the signature).