Signal on Android is reproducible https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds https://github.com/signalapp/Signal-Android/tree/mai

Signal on Android is reproducible https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds https://github.com/signalapp/Signal-Android/tree/main/reprod..., so _theoretically_ the play store version could be monitored to detect tampering by Google (or whoever). That is, if the reproducible build didn't constantly break https://github.com/signalapp/Signal-Android/issues/13565 https://github.com/signalapp/Signal-Android/issues/13565. It also ignores the fact that the vendor could send updates targeted to specific devices.