It turns out that the bug dubbed "Master Key" is just one of several similar bugs that allow modifying an app without affecting Android's verification system. Android users should remain vigilant.