MetropleX Thanks for replying, Yes Minimizing the counterparty risk and trusted parties is what I'm looking for, after a good few hours reading these forums alot of your replies and watching a really helpful guy on youtube (SOB), I think using the F-droid website to find the source code github link and getting the apk from there using the RSS method for updating seems to be the closest link between me and the creator (developer)
Thanks for sharing the privsec.dev F-droid article this is why I was cautious to just use a 3rd party provider to begin with, so it's appreciated along with your thoughts on apkpure/mirror etc, I was skeptical about these, so thanks.
One of the app's im struggling with is telegram, they have the apk on their website here : https://telegram.org/android but I can't seem to find the "Offical" .apk on github that i can setup rss on
.... Any suggestions/help ?
Also I'm loving the whole graphene experience and community and your a great moderator, thanks heaps.