pull down to refresh

No need to trust the intermediary. Reproducible builds are a thing. You can also add each project's official repository to F-Droid.