This is also why update signatures should be validated against a different server; it would require hackers to control bother servers to go undetected