No, you have to transfer the APK directly onto the device, either via download or ADB, to install f-droid. That means the OS has no concept of the source of the application (it’s just a raw APK).
Just because you personally trust the source (the website you download it from) doesn’t make it a known/trusted source from the OS’s perspective (whether that OS is Google Android, Graphene, or any other OS)
It’s a “chain of trust” issue. When you get something from a store, there are (usually) a bunch of things that happen behind the scene to make sure that the OS receives the application that is intended. Hash verification, signing certificate validation, SSL handshake with the source, etc. When you install an APK directly none of that happens.
But the origin of F-droid is me choosing a trusted source, no different from when I choose to use a store.
No, you have to transfer the APK directly onto the device, either via download or ADB, to install f-droid. That means the OS has no concept of the source of the application (it’s just a raw APK).
Just because you personally trust the source (the website you download it from) doesn’t make it a known/trusted source from the OS’s perspective (whether that OS is Google Android, Graphene, or any other OS)
It’s a “chain of trust” issue. When you get something from a store, there are (usually) a bunch of things that happen behind the scene to make sure that the OS receives the application that is intended. Hash verification, signing certificate validation, SSL handshake with the source, etc. When you install an APK directly none of that happens.