I know some people here distrust F-droid for some reason. Here is a blog post explaining how they are working on improving security