They could have designed a system to put the code signature inside Mach-O but they chose not to.