Fdroid is known to have a week or so lag between a new release of an open source app and the time it is available for users. Personally, given that f-droid is a volunteer driven organization, I accept that extra risk.
I understand the problem if your threat model makes this security risk unacceptable, however it is not fair to blame f-droid contributors if they don’t have the resources to identify, test and deploy near instant updates.