This has nothing to do with the developer publishing the source and allowing you to build from source or publishing through other channels (the topic of this subthread).

Developers can still create key pairs themselves and upload them to Google. So they can still publish their public key if they want and you can be certain that APKs distributed from somewhere other than Play were definitely signed by the developer.