accrescent, obtainium & nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpzamhxue69uhhxetpwf3kstnwdaejuar0v3shjtc3uszjr. A separate profile for Google Pay Services if you must.
not f-droid.
Discussion
What's wrong with F-Droid? 🤔
Why is f-droid a no go for you? Obtainium and zap store on my list for sure.
even on nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpr3mhxue69uhkgctkv5h8xapwvajhymtp9e5kutmwdaehgusqhknul, best practice would be to only install apps signed by the developer.
Is the zap store really safe? I can't be bothered to check every developers credentials individually :/
Like I can check that their app is infact signed by them but even if I know it is from them how do I know that I can trust them?
only download Open Source apps that have some popularity. these developers post the code publicly (usually GitHub) for anyone to review.
you don't necessarily have to review the code yourself, although it is pretty easy to copy & paste into chatGPT or similar.
with popular apps, you can be fairly certain someone else has reviewed the code and the developer is not committing project suicide by putting a line of malicious code in their app for anyone to see.