Apps from GitHub/FDroid vs Play Store?

Clark

I've seen some people claim it's more secure to download an (open source) app if it's available on Play rather than through GitHub or FDroid. Doesn't that mean you have to trust an additional party (Google), and is it so that they make the app inherently more secure as opposed to just trusting the developer?

What are your thoughts? Many of my FOSS apps are on Play but thus far I've made use of Obtainium and only trusting the developer.

treenutz68

Clark

I don't know a lot about this subject it seems Fdroid/Obtanium is the preferred method for people like Michael Bazzell, TheHatedOne, SideOfBurritos, Naomi Brockwell, etc... They are more privacy focused IMO than security focused, while I think some of the people on this forum advising using Play are more security focused.

Take from that what you will, as I said, I don't know enough about the subject except to note that observation!

ErnestThornhill

Have you read any of the numerous previous discussions on this forum related to this topic?

Clark

ErnestThornhill some of them, though I haven't read about anybody motivating the security aspect so much thus far.

Scott

As far as I understand the crowd here, the best solution is to use

Obtainium
Get Android app updates directly from the source

https://github.com/ImranR98/Obtainium

better than F-Droid and Aurora Store