[tailspin2019]

> As for subtle push app updates by Signal themselves being a vector- i'd think the Open Source nature of the app prevent that

The lack of reproducible builds for Signal’s apps has been a topic of discussion for quite some time:

https://github.com/signalapp/Signal-iOS/issues/641