Yes, and it checks for updates by itself (though that's still more cumbersome than it being managed by F-Droid of course): https://signal.org/android/apk/
yes that's something I'd like to avoid... because it hasn't been rebuilt from source (and audited)