F-Droid or Github download

[westnordost]

Oh, regarding F-Droid security, here is another good info from another thread:

F-Droid build-bot stuck since Friday?

The signing step takes place on a machine that isn’t networked (air gapped). Its mentioned briefly at Security Model | F-Droid - Free and Open Source Android App Repository. This step isn’t automated. Somebody has to do a physical transfer (sneakernet), so its reasonable to expect the occasional delay.