Trusted Signed Malware evading the AV scanner

Hi

In a recent paper the author claims that AV scanners trust all signed apps and the malware authors exploit this by compromising the developer's machine to steal their certs and then use them. In other words the scanner does not scan EVERYTHING!

Is this true for SAV or can we relax?

Trusted Signed Malware

Thanks

Paul