Comment by justin_oaks

Inasmuch as PGP signatures are rarely used and even more rarely useful, I don't think it's a problem to remove them and replace them with nothing. If it is a problem, it's been a problem for a long time and it's not really making the situation meaningfully worse to remove them.

That said, if PGP signatures are to be replaced then there's no reason why they can't be removed now and replaced with something later.