app store code signing is no different than a mirror having a private ssl keys for the domain you are downloading from

or a closed source including a gpl3 Library in its packaging.

both have nothing with the license and are a common FUD argument by people who do not like the implied freedoms of the gpl when arguing for more permissively comercial licenses, so apologize if i wrongly mistook you for the more probable case.