There is no guarantee that play store build contains the same code as GitHub repository. Ideally you'd need to compile apps yourself.

But most of the time stuff like vaultwarden is trustworthy enough.