Here's my #grapheneOS order of preference in terms of downloading apps and keeping them up to date

1. Apk directly from GitHub/Gitlab etc

2. Apk download directly from app website

To keep 1 and 2 updated automatically I use Obtainium

3. Google Playstore using Aurora Store with their shared anonymous login option

👎 Fdroid - I've steered clear after reading https://privsec.dev/posts/android/f-droid-security-issues/

🤝