1, conventional solution: If this installation package does not contain any certificates, directly refuse to sign. You can open the installation package with decompression software, delete everything in the META-INF folder, and then recompress it into a zip file with compression software and rename it. Apk, final installation.
2. Use third-party software to sign: public key and private key are required for signing, and CA may be required for official release, but the certificate can be signed directly.