That doesn't matter. The total signature is still different from factory default, so if any change is made to any other file it will be different and need to be updated :)
What's being signed is a hash of all the individual file hashes, so any file being different from stock will mean a difference, whether it was changed in the latest update or not.
I too am not happy about the root snapshot thing...