But most people don't compile their own apps. F-Droid seems to help ensure the compiled binaries are open source, not just using the name of a related open source project and lying about being open source
Discussion
You are right.
99.999% people just trust the provided binaries.
To more or less reduce that worry, there is a neat feature on github that permits to compile the code directly from their docker instances and let you download a freshly compiled binary.
The geogram code for ESP32 is not so big, it is relatively easy to read for manual inspection: https://github.com/geograms/geogram-tdongle/tree/main/src
I distrust F-Droid, but I would never even think about going along with github
The other option is compiling yourself. For a small project there aren't many other ways of making it more comfortable for users to perform these actions.
Oh, I was confused what thread I was in, sorry!
I woke up to a notification in another thread about F-Droid and open source apps, so my replies to you were all confused until this one 🤙
No worries, already good to read your feedback and know there are more people who care for this kind of tools. Otherwise it does feel lonely writing them.
When everything clicks together, nostr is going to flood with people and the only loneliness you'll feel is empathy with the people you don't have time to reply to in your many notifications