They may be popular, but that doesn't mean they're not silly. Requiring magical signatures to get rid of the scary "this person is trying to hack you" popups is quite a silly thing for an operating system to do.
The way Apple implemented it, where you can just sign your malware so the signature part is kind of useless, makes it weird, though.