Because the risk of a DHCP attack doesn’t outweigh the complexity of implementing digital signatures.