F-Droid on Nostr: F-Droid hosts the apps as they are, if they're vulnerable they are everywhere. ...

F-Droid hosts the apps as they are, if they're vulnerable they are everywhere. There's a question of trust too, developers expect us to ship their app build from the source code, not modified it without their consent, even if for a 'good' reason. F-Droid packages the apps, does not maintain them. No store does this, yet we tracked the issues, warned the devs and tried to work with them as much as we could.