Comment by NoGravitas

Yes, but then when you update the app, it has to be signed with the same certificate. Android effectively uses TOFU for apk signatures.