stf on Nostr: question, git commit signatures. why? who cares who signed it? what matters is the ...

question, git commit signatures. why? who cares who signed it? what matters is the contents! without rigorous checking of signatures & a proper infrastructure to actually distribute public keys, certify their authenticity, handle the key-lifecycle its just security larping. maybe in big projects this is good for delegating trust to sub-project maintainers, so the boss doesn't have to review commits, only sigs. but that's burocracy. jiatan would've signed their backdoors. so the question is why?