I've disabled signatures on the OWA Virtual Directory to absolutely no effect. Signature options continue to appear and operate as normal in OWA despite being disabled and an IIS reset performed on the server.
I'd prefer to disable signatures at the server level rather than by user policy (which also requires scripted destruction of existing signatures on existing user accounts in order to effect a "no signatures from Exchange whatsover" setup).