If you tick the 'Enable GPG key signing for commits' on the security tab when GPG isn't installed the correct warning message is displayed, and you still can't select a key, but the check box remains turned on. It shouldn't allow the user to tick it (auto-untick) so the user doesn't get any false hope.

Error message is displayed correctly though