m-p{3}

Hopefully C Diff will catch a RFK Jr.

That’s the point of digitally signing the app, to ensure its authenticity and integrity. TM and others wouldn’t be able to resign the modified app with the Signal Foundation signature.

EDIT: Yeah after thinking more about it it’s not a trivial problem, as you need to assume that the endpoint is inherently untrusted.

At the moment you can’t. The only realistic way I could see that happening is if the servers would check the app’s digital signature and refuse the app from communicating with the official infrastructure if it didn’t match.