> This enables users to download an Android APK ... from a third-party which mirrors the Play Store apps (no credentials needed).

Will it allow the app developers to sign releases, and will it check the signature when an APK is downloaded? Ideally these third-party mirrors would also support binary transparency, using a system like this:

https://github.com/kpcyrd/pacman-bintrans