> Isn't the purpose of App Signing primarily for Google's software running on your device to verify Apps running in your device against public signatures Google

> Isn't the purpose of App Signing primarily for Google's software running on your device to verify Apps running in your device against public signatures Google holds on it's servers? The primary (or at least original) purpose is to verify that app updates (or in some cases extensions/companion app that can directly access each other's data) are signed by the same key as the already installed app. Though I supposed that these days PlayProtect will likely indeed check the signature against Google's database on first installation, too.