1Password signs their binary distributions, but this action does not implement signature verification during the CLI install process. Supply chain attacks are becoming more common all the time, so it would be great to see this implemented.