What do you mean by this? Isn’t Google’s signing key only used to verify an update for an app is actually the for correct app?
Even if Google could decompile the app, they wouldn’t have access to Signal’s servers or any encryption keys so they could read any messages.
Doubtful. Google owns the signing keys specifically so they can recompile for individual downloads.
They aren’t encrypting the messages with the signing keys.
Do you even know how a signing key work?
What do you mean by this? Isn’t Google’s signing key only used to verify an update for an app is actually the for correct app? Even if Google could decompile the app, they wouldn’t have access to Signal’s servers or any encryption keys so they could read any messages.