Signing an email forwarded PDF

Why can I sign a pdf that was forward to me by that person, and then I can sign it with that person's signature?  This doesn't seem secure to me.  As well in the audit report, it doesn't show anything except that it was signed by the original recipient.

Thank you.