> signature checking is well understood and rarely goes wrong

I would argue otherwise, plenty of signature schemes give you enough rope to hang yourself. The Playstation 3 example springs to mind!