Comment on apps .. repo or not
redknight@infosec.pub 2 months ago
Unfortunately this is a moving target, depending on what you define as your trust anchor.
Is your anchor the original Team? Fdroid wioth the (reproducible) build? Something else?
depending on the answer, the “good” solution is probably different from mine