From backdrop/backdrop-issues#1992 (comment):

@quicksketch said:

What bee will want to do however is to incorporate the same signature checking the installer module will use, so when updating projects through bee, they also get the same security benefit.

Updates within bee are still a little way off (see #111 ) and will need to see how core implements this before deciding how bee should implement this.