Should companion apps verify firmware signatures before OTA?

Firmware signature verification belongs in the bootloader or secure update path; the companion app should mainly transport signed bundles and report device status. Do not skip device-side checks because the app UI says verified. For example, an OTA app can show authenticity only after the bootloader confirms the installed image hash.