Or… you sign the source of the notes rather than each individual note itself.
Zapstore would be a ton easier if devs only had to sign their homeserver once and could just have access control from there for the releases, ngl.
❤️1