Yes Bundling In-App key with app is not proper solution and it will bring security risks and I'm not mentioned bundling it in my comment.
My Ask is can we just make the offer signature as optional thing it really doesn't makes sense only adds additional step where we already showing the offer based on our app logic.
Topic:
StoreKit
SubTopic:
StoreKit, In-App Purchase, and App Store Server API Q&A