My question is: > Doesn't that mean that I could write an app, sign it with those keys (they are public, since they are for testing), and then have it behave l

My question is: > Doesn't that mean that I could write an app, sign it with those keys (they are public, since they are for testing), and then have it behave like a "system" app on those devices?