"Both problems" are forged senders,
If signed mail were the norm, viruses would send out signed mail. If they needed to get a pass phrase from the human user, they would do that.