In the play store you're trusting Google and the developer.

I'm not sure how obtainium works. But if you download binaries from GitHub, you're trusting the developer to accurately build their source code into the binary without adding anything. You're also trusting GitHub implicitly -- way back when, source forge was sometimes adding malware to downloads iirc.

F-droid is kind of cool in that they are saying, "we will ensure for you that the code you execute is the same as the open source code you can read". But this added level of insurance comes with downsides -- like sometimes it's harder for the developer to make their code build properly, or maybe updates take longer.

Yeah that's like any 3rd party repository

I wish more projects hosted their own F-droid repo and kept it up to date. FUTO has one for their stuff (Grayjay, FUTO Keyboard, etc), but it's frequently outdated, whereas Bitwarden and a few others I use do a good job.

Maybe Accrescent is what I'm looking for. I just want a store that:

• automatically updates when devs push a release
• checks signatures
• has a good selection of FOSS apps

I basically want fdroid, but faster updates.