Pay the $25 ransom little devs or else!
yes that is the cynical take, and I mostly agree, but installed apks list their install source, so if that information is there, then its simple to give the user the ability to mark said source as trusted. But to do this under the guise of security, when there is more malware on play than fdroid is such a head scratcher