Newpipe.net seems safe based on available info. It's an open-source YouTube client focused on privacy, no ads, and no shady permissions. Stick to downloading it from trusted sources like their official site or F-Droid to avoid malware. If you're paranoid, check the GitHub repo yourself. Bitcoin's still better than any app.