But it's irrelevant trust. Stuff about signatures and specific practices. What makes F-Droid more secure are the kind of apps that are in it, that the apps are

But it's irrelevant trust. Stuff about signatures and specific practices. What makes F-Droid more secure are the kind of apps that are in it, that the apps are FOSS alone makes it less likely for spyware to be added to them. Sure it can still happen and then F-Droid's security practices become relevant. But each time you install an app, there is more trust you can give to an app in F-Droid, than the basically zero trust you can give to proprietary app in the play store. The article is completely baffling in not really covering that. "strong security and privacy guarantees" mean jack shit when the game from the play store starts leaking all data it can grab or adds bank phishing - and it will have a bunch of permissions anyway, it legitimately needs them to function.