I think its pretty safe. If you install the first apk manualy direcrly from the dev it will have the devs signature. In case Obtainium would tamper with the apk in any way, Android wouldn't install it because signatures differ. What are your concerns?