Yeah, no. This is a stupid argument. If you’re opening an app signed by Mozilla Corporation it’s probably Firefox. If you’re opening an app from [porn app publisher] guess what, it’s a porn app. Nobody cares which one.
I just checked my Steam library and none of them use codesigning so I guess that solves that. Video playing apps do though, so depends on plausible deniability.
It does seem like this could be fixed using the private relay system. It certainly doesn't need to be unencrypted.
It's not unique to the app, the article is just wrong. It's unique to the /developer/, which is much less specific.