I didn't know you could run unsigned code on the PSP. Or did you mention that before?

And regardless of whether it's in the hardware or as software, it's still pretty much a one-time cost. Of course, they could also do something like add a bit onto it that reads some sort of crypto signature to help prevent unauthorized games from being run on it.