The general problem of how to ensure app integrity without relying on the dominant OS providers has cropped up elsewhere.