Not exactly. Signing would have minimized the overall damage by letting Gatekeeper halt all installs from pretty much the moment the malware was discovered. And

Not exactly. Signing would have minimized the overall damage by letting Gatekeeper halt all installs from pretty much the moment the malware was discovered. And distributing through the Mac App Store would have prevented this MITM attack in the first place.