Droid-ify is an F-droid frontend, that is also in F-droids repo as an installable app so it’s safe, in this case one of the F-droid repos OP has is actually malicious and is installing a modified version of Signal, the package name is wrong org.thoughtcrimes.securesms, it should be thoughtcrime without the S.
I think Play Protect is intrusive, but this time it actually tried to protect OP from a malicious Signal clone.