Ted,
You are right about singing the XSN, but from the point of view of the end user it is a problem because only the developer signes the template / XSN. As a user you don't have any guarentee that after signing a form the creator of the form will not change the xsn.
Any suggestions ?