Yes, you are right. Mea culpa. The point I want to make is that these platform versions can be verified by essentially any user.
Wasn’t there a scammer who managed to upload an android version of ”Daedalus” on Google Store? There is no such thing and the sad part is that if you didn’t know you simply could not check who signed it. I think that’s a missing feature.