Git commit signatures do not protect against hash collisions, as the same signed content can produce multiple different commit hashes with valid signatures.