A signature proves who built an app. A reproducible build proves what's inside it. We want both.
Encrypting content is a solved problem. Hiding who talks to whom is where honest messengers earn their keep.