You can read up more on Commit signature verification in the GitHub docs at Managing commit signature verification .
It's important to provide confidence that commits from you are actually from you.
If changes are made and it looks like you but you didn't actually make them what happens then?
What if we pretend to be someone else? What does that look like
Now we'll be a bot 😂
ANother change
Another change again 2
Signed local change
another signed change
last signed change