rich1.0naruto wrotenaruto (npub1w2…c7tte)https://nostr.now/npub1w2rfg6swqzjgv84h23lwp2vdga4w90wntxejmf4zfhrwl0kuzqpqvc7ttenjumphttps://nostr.nowI have a question about nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshszrnhwden5te0dehhxtnvdakz7adgsu4
Is the trust model basically: trust Zapstore to point to the right URL and app creator signing info on first install, and then all updates after are signed by the app creator?