Interesting, I was not aware of that. sounds like a security risk, as you don’t know who actually published it, but I guess since its open source that doesn’t really matter as much

Do you know why the signatures would be different? At my company we release our app on Google play, galaxy and Amazon store and I’m pretty sure we use the same signing key for each