[CuriousCosmic]

To add onto this, if you care about supply chain attacks, bitwarden mobile supports Fdroid builds (albeit not part of the main repo because they rely on xamarin) so you can host your own fdroid repo and run your own builds if so desired.

[jjeaff]

If you are making your own build, is there a benefit to using f-droid? Why not just install the APK?

[CuriousCosmic]

You can just use local CI to build it and then when your F-droid checks for updates you get a push notification on your phone.

If you want to gate it, you can just periodically update the local git repo after you reviewed it (or just follow up to main minus a few days).

[notpushkin]

Update notifications?