@Alonely0 @cy8aer @fdroidorg @marcprux Since you brought up the signature model, Google Play requires devs keep the signing keys with them, F-Droid just offers it as an option. F-Droid offers using only the upstream signature if the app is reproducible. https://f-droid.org/docs/Reproducible_Builds/#publishing-apks-with-the-upstream-developers-signature

Also, how the APK signing keys are managed has nothing to do with Android Developer Verification or Keep Android Open.