Since it is not the default to sign assertions in IdPs, it shouldn't be the default not to ignore them in standalone SPs.