EverettHitch I am not
This is the crux, it's personal, whether the app hashes match now, is irrelevant if the processes don't prevent them from not, necessarily, doing in the future.
Despite this, I understanding the issues and as like you, appreciating the risk, need Aurora for things like eBay as it is still the lesser evil from getting it from a Play Store front end over a third party apk hosting website.
Individuals can certainly choose their own threat model, and level of risk, recommendations can be made here freely when those risks are outlined and addressed where they exist. We want to help people by giving them the ability to make informed decisions. How people use their devices is their prerogative. However ours is what we wish to see here on our forum.