That's cause app don't have certificates, you can check it on virus total or any other online anti-virus
What do you mean by "how"?
Yeap
