The signature and the random updates issues can be solved (partially) by using the izzyondroid repo. A lot of the applications on fdroid are on it. It compiles from sources, doesn't change signatures, and fetch updates on a daily basis.

It doesn't solve all the issues, but it can help