needing to forge signatures/hashes isn't a particularly small speed bump for malware . . . this is obviously a big step up from unprotected space.