This blog post has been taken over by PrivSec with my explicit permission, and will be continuously improved by other people. You can access this updated blog post [on the PrivSec website](https://privsec.dev/posts/android/f-droid-security-issues/). They will continue improving it without me.
I decided to take down the original blog post of my own accord since I didn't want too much attention from it, and this has very much become a burden. I was particularly saddened by the negative reactions which often resorted to personal attacks, rather than a healthy exchange focused on technical facts. I would like to stop being mentioned publicly on this subject.