lunaticoin on Nostr: I see devs sign their apps in 2 way: - they sign a hash of the apk, zip etc - or thr ...

I see devs sign their apps in 2 way:
- they sign a hash of the apk, zip etc
- or thr sign directly de apk, zip etc

What is the difference? Why choosing doing an extra step and hashing it first?