Signatures generally commit to the entire set of inputs and outputs of transactions (unless you use non-default sighash-flags). So, if someone changes an output, the signature wouldn’t fit anymore.