Android apps outside Play Store now need verification, but ADB still lets users sideload without digital signatures.