You can prove that an application file you download came from a given npub, so we want more developers to (nostr) sign their own releases