I propose a scorched earth tactic. Refuse to run unsigned code.