If I understand it correctly, the build toolchain applies encryption and a runtime signature check to protect the compiled executable against tampering. Why wou

If I understand it correctly, the build toolchain applies encryption and a runtime signature check to protect the compiled executable against tampering. Why would an attacker bother with those protections if they can easily replace the executable with another one compiled without 8th? What’s the threat model the encryption and signature tries to guard against?