That's not what I said. It's fine for devices to only run signed code. It only becomes bad when the owner isn't in control of whose code signatures are trusted.