There was a big git hoster (cough bitbucket cough) who didn’t have support for signed commits until a few months ago. But the signature is only considered good if the pubkey you uploaded contains the mail you use for logging in. Because surely no sane person would have more than one mail, right?

commit signing is a thing

The tech-lead is in the adjacent cell. Now you know why.