Comment by generalizations

Deterministic binaries? (I forget the correct term) Then just compile yourself from source, and compare to the apk you install.

That doesn't solve the intermediary servers, but if it's e2e encrypted that only matters for metadata.