They do, but the very bug they're trying to patch is a flaw in the signature verification function. Meaning any bogus signature will pass the check.

Technically, that would be a solution. But I'd only trust it if Apple publicly explained how it works.