Great question. I would assume Signal has some sort of signed reproducible builds, but I have no idea what the Apple store process is like. Do you not just submit a binary to the store?