Hacker News Reader

You can download the APK directly from Signal: https://signal.org/android/apk/

When a new version is released, the Signal app notifies you.

Problem is, the APK is a closed-source binary. What they include there might be completely different from what is in the source.

Not with reproducible builds, no.