Comment by bink
With Signal they provide a toolkit you can use to verify that the checksum for your App Store download matches that of the public build or one that you compile yourself.
edit: This is apparently currently not working for Apple and MS builds.
https://github.com/signalapp/Signal-Desktop/blob/main/reprod...
Why compromise Signal when Apple is an American company