Just like in Android we support signed apk for that you can install app which is signed by some developer you can’t update the same app from different source which signed with other signature and the developer will hold the official and original signature so that is no option side channel attack and provide better security and privacy through out the system same thing if implemented in black pack applications so if x y z have find the same application user only be able to install the same app from other than that flathub which will ensure enormous amount of security.
APK are signed by google for a developer, not the developer, and they are checked for issues like malware.
For RPMs Fedora has a process to check that the contents is fit for purpose.
I think you are asking for the same thing to be done for flaypak’s?
No in android apps are signed by the developer gor which are downloaded from play store what you are referring
This happen in the fdroid that fdroid build themselves and sign with there key.
Yes i am asking for either signed with fedora own key or sign apps with the developers own key.