rush, 8 months ago

because obtainium gets many apps directly from F-Droid.org too, not just github

And for those downloads, it does no verification

Not on GitHub either, where signatures are often attached together with the APK.