@buherator [This is pure speculation, based on unverified assumptions]
It could be a case of signature is in the archive and signs its content, not the archive? apk had that problem some years ago. You could simply add files to the archive, and those extra files would be extracted, and remain in the root fs.