well its sort of an issue it seems where we can sign a master key to any application and from what i take from this it is how android etc checks if an app has been altered
It’s not really a small flaw as an application that has the mark of the manufacturer and that it is instead a malicious application, are granted rights of a super user with the ability to compromise the entire contents of device! A major hazard!