Carousel Studio

GrapheneOS

@GrapheneOS

@btc_pri @Don_Specifico @davidbombal There are a lot of choices for getting apps from outside the Play Store. We recommend <a target="_blank" href="https://accrescent.app/" color="blue">accrescent.app</a> for the small number of apps available in it including Molly. Accrescent needs more contributors and funding to substantially expand. We're going to try to support that.

GrapheneOS

@GrapheneOS

@btc_pri @Don_Specifico @davidbombal We don't recommend manually downloading app releases from GitHub, etc. mainly because you won't have automatic updates. You can solve that issue with the Obtainium app. However, unlike a proper app store, it won't secure the initial download beyond the HTTPS connection security.

GrapheneOS

@GrapheneOS

@btc_pri @Don_Specifico @davidbombal F-Droid has far too many security and trust issues for us to recommend it. The vast majority of apps in the official F-Droid repository are built on their sketchy infrastructure and signed with their own keys. We're concerned about a future mass compromise of F-Droid users.

GrapheneOS

@GrapheneOS

@btc_pri @Don_Specifico @davidbombal People who work on F-Droid have demonstrated a lack of trustworthiness including engaging in harassment towards security researchers and covering up vulnerabilities/weaknesses in the app. Lead developer has repeatedly claimed app sandboxes aren't useful or a good approach...

GrapheneOS

@GrapheneOS

@btc_pri @Don_Specifico @davidbombal Major app/server and build infrastructure security improvements along with anti-security and untrustworthy people leaving the project would be a prerequisite to us considering even packaging F-Droid in our app repository. That's very unlikely, so we want Accrescent to replace it.