love it!

is zap.store signing a kind of interim step to establish trust until developers are setup to sign their own binaries?