You have to vet the apps dev by dev. Obtanium is just a convenient way to track and update apps.
Discussion
That triggers my inside paranoid man :)
Just because your paranoid doesn't mean you haven't downloaded a computer virus.
Yes, but I'd rather have someone audit the apps I install beforehand. AFAIK the Google play protect service does this.
Play Protect is a verification service that issues a certificate. An app can be listed elsewhere and show that certificate.
