It's a problem with "free as in beer" apps but not with "free as in freedom" apps. When the packages are built from source code by a trusted distributor like D

It's a problem with "free as in beer" apps but not with "free as in freedom" apps. When the packages are built from source code by a trusted distributor like Debian or F-Droid [1], this kind of change is likely going to be noticed by the packager and not let through to users. [1] https://f-droid.org/ https://f-droid.org/