Google's plan to restrict sideloading on Android has a potential escape hatch for users
(www.androidauthority.com)
I'm not sure why google is over engineering this, proper mainline distros have this solved since forever. Let the community setup trusted repos with gpg keys, then let me trust the repos. If Fdroid trusts the package and I trust Fdroid, who should care?