IMO alternative firmware projects make things better for the 0.1% while throwing the other 99.9% of humanity under the bus. If we want the Internet as a whole to be more secure, not just our own home networks, we need to solve crappy vendor firmware somehow and not signing updates is unlikely to help. OnHub has a good tradeoff with signed auto-updates by default and a developer mode switch for hackers.