There is still a fundamental problem with all this. Anything that is appropriately signed is allowed. It would be an astonishing accomplishment for there to be the first piece of software ever that is bug and security hole free. For a bad guy to break into the system all they have to do is downgrade to signed code with a bug/security hole.

Unless of course you add something preventing downgrades which itself would also have to be bug free.