> it will be very hard to ensure that no malicious apps get in Well isn't the whole idea of F-Droid is that the app can be build from the source that is availa

> it will be very hard to ensure that no malicious apps get in Well isn't the whole idea of F-Droid is that the app can be build from the source that is available and the build checksum will match the source from anyone? Sure there can be malicious code, but code for that malicious code will also be available publicly.