Is there anything more pointless than signed commits? If your security team ever enforced it you're probably already pwned but may as well replace them just in case.
Why do you say that? It seems like they would be more important in the context of supply chain attacks.
If they were able to get your keys to push a commit or sneak code into your branch we are waaaaay past the territory where a signed commit can be trusted.