Updates definitely need to be signed.    I too am tired of "cleaning up the mess" of lazy software companies.