Yeah... one of the criticisms levied at F-Droid is that you need to trust them over the app developers but as we can see in cases like this, I think that's a feature, not a bug.

It's one reason I'll never use something like Obtainium for instance.