Signatures prove integrity. Platforms provide context. Identity requires deliberate linkage.
Interesting to see Zapstore explicitly tying together repo, npub, and APK cert to make that work.