If it’s not official, how do you verify who is building the binary?

It’s weird that this isn’t mentioned on the signal website or blog? They also distribute the binary with a signature you can check there if you want a non-play store source that’s actually verifiable.

They do provide tunnels…