It certainly will not bring “gift” as all uploaded apk’s are checked against the expected digital signature, if it doesn’t match then the apk won’t even be visible. You can download apkpure and use it to install Tor, if you want extra reassurance then use classyshark to scan Tor, copy/paste the signature into Google and it will confirm the legitimacy. Ignore justsomeagent, he knows zero.