That's not actually true. You can sign an app without going through RIM; they provide code that does it. (Unlike iPhone, you can just download an app from anywhere on the Internet and install it, as long as somebody has signed it with any key at all.) However, you can't use their push servers without a RIM-signed app, which has apparently been revoked in this case.