When commits move from one tree to another (which is the only time when full code review isn't done, because the maintainer is generally trusted), it is done wi

When commits move from one tree to another (which is the only time when full code review isn't done, because the maintainer is generally trusted), it is done with a GPG-signed tag. Email's lack of signing therefore is not an issue.