I mean verify before download. For example if someone upload a malicious apk not signed by the dev Obtainium will download and install it, right?