Draiodoir
I'd bet there are more instances of people downloading malware apps off of the google play store than on any other android app store. I'm sure you already know to perform a bit of due diligence before installing something.
Many comments that you'll see are like this:
Throw away your high heels ladies. Adding just 1 inch--2.5cm--to flats increases ankle injuries by 20,000%. Your bones will break soon--heels aren't best practice.
Just the other day, a person on this forum claimed that an encrypted hard drive is extremely easy to crack and read. Maybe for the USA's NSA and a subset of motherboards.
There was a crusade against Fdroid. Many people that are not technical still parrot the issues that they fixed 2-3 years ago. There is still a magnifying glass held to fdroid to this day.
"[If fdroid gets hacked, you might be unsafe.]"
Is fdroid the only org susceptible to hacks?
Besides, you'd have to find out an Fdroid dev's home address, buy a plane ticket, break-and-enter to obtain physical access to something that isn't on the internet.
Keep in mind that many people that you'll encounter are on the far end of security, perfection, and/or paranoia. Many people miss the forest for the trees and focus on the most convoluted, theoretical improbabilities.
We are more likely to be affected by a random, rogue, app dev--once trusted for years/decades. (e.g. event-stream 2018, node-ipc 2022, left-pad 2016).
Very little can be 100% in this world. We will have to trust someone eventually. We don't have the time to closely monitor every dev and repository. 99.999% is good enough.