This is a so irrelevant debate mixing ignorance and paranoia
We're talking about signature, not a different release.
Just rename the apk to .zip and do a binary compare. This will make some people here understand what's an apk and what parts of it are the binaries, the resources and the signature.

I do not plan to post another version in the future here anyway, so relax. The post was meant to the OP so maybe he can consider using the stock and most used android testkey instead of some custom keys.

End of debate and please only get my signed apk if you are bored from uninstall and reinstall on each update. If you're not concerned, just enjoy what you have. If you are paranoid, just do the compare and stop bitching without even verifying.

Again, many thanks to the OP for patching TomTom, keep up the good work. No credits to me as I did not patch a bit :-)