So many of the apps I am looking for are there (Nextcloud, obsidian) and signed by zapstore. Yubico Authenticator I had to add to use obsidian to add and track the APK source directly from GitHub. Effectively, it would be awesome if you could define your own source and potentially even publish/share to nostr it with others (signed by your npub). The web of trust features and filters could help eliminate most of the junk.