Thanks, but I'm not sure I understand either :D
Correct me if I am wrong (I often am so I mean it!) but what I think I have learned from more knowledgeable GOS team members is...
Getting code from Aurora and Fdroid is not recommended, security risks due to the lack of moderation/vetting of the code (Fdroid mainly).
So when I installed Obtainium I did not tick Fdroid options, only github, thinking that ensures my code isn't coming from some possibly insecure repo, but direct from the creator. Am I wrong there?