Looks like the cherry-picks that the backport action creates also do not have verified signatures. So, it may not be usable with our PR requirements 😕