In theory, Binary Transparency (https://binary.transparency.dev/ https://binary.transparency.dev/) solves that among other things. To pass verification, an upd

In theory, Binary Transparency (https://binary.transparency.dev/ https://binary.transparency.dev/) solves that among other things. To pass verification, an update has to prove that it's included in a public log of releases. But I guess Signal doesn't implement it?