I would assume that there is some sort of identification process too as part of the signing service. If some horrible malware came out signed by you, they could:
1. Trace it back to you and prosecute
2. Sue you for negligence in losing control of your key