Thanks clarifying, was not aware that the signature can be that easily separated.

Does that mean that in case there is a reproducible build method available I can take an apk, unpack and try to reproduce just the binary?