I’m confused, why would a kernel need to be signed if you don’t actually care about secureboot? If you have a signed GRUB, then UEFI with SB will run it, after

I’m confused, why would a kernel need to be signed if you don’t actually care about secureboot? If you have a signed GRUB, then UEFI with SB will run it, after which you can use GRUB to launch any kernel, signed or not, right?