The Android Gradle plugin will not expose an unsigned version of your APK if you have a signConfig assigned to your buildType type. At that moment when you take out your Config signature and rebuild (or create a debug version), you will see something like this:
$ ./gradlew clean assembleRelease $ find . -name \*.apk ./app/build/outputs/apk/app-<flavor>-release-unsigned.apk
source share