Should I ask for the AAB and APK?
Always. A trustworthy publisher hands you the signed AAB (what ships) and APK (what you can test) on request. If they refuse to show you the build going out under your name, that's your answer. How to verify a build.