# Is Calyx OS a grift or on the right path? **URL:** https://discuss.privacyguides.net/t/is-calyx-os-a-grift-or-on-the-right-path/26594 **Category:** Questions **Created:** 2025-04-10T15:42:52Z **Posts:** 29 ## Post 1 by @starkle — 2025-04-08T18:25:14Z > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/34): > > Calyx does some decent work in the FOSS and privacy space. And as I and others laid out it’s always good to have alternatives. If what they do isn’t relevant to you then great, you do you. That doesn’t make them “pointless” (or “grifters,” as another user posited). Having more alternatives is not always better. I’m sure you’d agree some Linux distros are pointless. You could probably say the sheer number of alternatives is a detriment, because it’s daunting for new users to weigh their options (and most of them suck). More options isn’t better. More competitive options is better. Edit: it looks like this comment got turned into someone elses thread. To be clear, I haven’t called Calyx a grift, and I don’t like this thread’s title. --- ## Post 2 by @anon39279085 — 2025-04-08T18:36:49Z I daresay: I’m in the opinion that options are good nonetheless. In my experience I’ve seen people that no matter what you tell them they will stick to a specific Option or a service has a specific appeal and that’s why I can confidently recommend it. **Granted** In a community like this I understand it and it’s best to recommend options based on an individual’s threat model and It’s nice to get a broader perspective. For example I definitely would not recommend Firefox on Android period but if someone like me has a niche unique case _Exhibit A, Libredirect_ I could probably say “It’s fine just be aware of the drawbacks before doing so” **It’s honestly only annoying if you start shoving it down their throat after they have set their mind onto [As long as it’s not something harmful] or if you’re representing a bigger community making claims without any substantial evidence of such** as for the overwhelming options, Yes I can see your point however you know what’s worse? That alot of people tend to be in the “Things are black and white” I know someone who actually felt overwhelmed because of this, not mentioning who unless they consent. Finally, projects come and go, having alternatives is very very important in case it happens. --- ## Post 3 by @mika — 2025-04-08T20:28:58Z Having two or three decent options is always better than having only one. This is not comparable to Linux distros, of which there are dozens (hundreds?). Calyx is not as private and secure as Graphene, but it’s much more private than stock Android. It may not be “competitive” for your use case but it is competitive for the use cases and needs of other people. As another example, I use Firefox on Android because maximum privacy and security is not my _only_ priority in life. I don’t think it should be recommended on PG, but it’s what makes sense for me. If we can’t engage with the space between black and white then I don’t think we’ll see eye to eye here. --- ## Post 4 by @starkle — 2025-04-08T21:28:42Z It was just a counterexample to show more alternatives is not always good. Of course it’s not exactly analogous to CalyxOS vs GrapheneOS. I also use Firefox on Android to use an extension I count on. I don’t deal in black and white or see tools as either maximum security or awful trash (despite what you’ve repeatedly accused me of). I’m still waiting for evidence that CalyxOS is competitive for the use cases / needs of some people. If it’s just the 5 non-Pixel phones they support, then I just disagree that’s substantial enough to be happy a non-profit is spending resources on that. Especially since I outlined how that benefit of broad hardware support could be much better achieved by forking GrapheneOS. --- ## Post 5 by @mika — 2025-04-08T22:00:32Z > [@starkle](#): > > It was just a counterexample to show more alternatives is not always good. Of course it’s not exactly analogous to CalyxOS vs GrapheneOS. > > I also use Firefox on Android to use an extension I count on. I don’t deal in black and white or see tools as either maximum security or awful trash (despite what you’ve repeatedly accused me of). I have not repeatedly accused you of anything. I used hyperbole to make a point, as you did with your Linux example. > [@starkle](#): > > I’m still waiting for evidence that CalyxOS is competitive for the use cases / needs of some people. If it’s just the 5 non-Pixel phones they support, then I just disagree that’s substantial enough to be happy a non-profit is spending resources on that. Especially since I outlined how that benefit of broad hardware support could be much better achieved by forking GrapheneOS. I provided you with multiple use cases for CalyxOS, as well as explained why (to my understanding) they don’t fork Graphene or work on it. If you don’t feel their work is ‘substantial enough’ then that is totally valid, you are allowed to have your own perspective and priorities. But please understand that your priorities are not everyone’s. --- ## Post 6 by @starkle — 2025-04-08T23:04:03Z > [@mika](#): > > I have not repeatedly accused you of anything. I used hyperbole to make a point, as you did with your Linux example. It was a counterexample, not hyperbole. Testing the extreme of a broad claim like “more alternatives are always good” isn’t hyperbole. > [@mika](#): > > I provided you with multiple use cases for CalyxOS No you haven’t. I checked. > [@mika](#): > > please understand that your priorities are not everyone’s. It’s not about my priorities, it’s about the Calyx institute’s stated priorities of making phones private. It’s a solved problem. GrapheneOS exists and is very good. It has shortcomings, like limited hardware support. An alternative option that addresses those shortcomings would be a “good” alternative. Calyx doesn’t focus on those shortcomings, and as a result fails in their own stated goal. Say I had the goal to make phones private. I fork AOSP, work really hard reimplenenting a small fraction of GrapheneOS features, and start collecting donations. You could say I’m succeeding in making phones more private and bringing another option to the table. You could also say it’s a big waste of everyone’s time and money because GrapheneOS already exists and I could have just forked or used that instead. But if I port my work to a couple non-Pixel devices on a whim, suddenly it’s not a waste of anyone’s time and money. That’s roughly how I see this conversation around CalyxOS. --- ## Post 7 by @mika — 2025-04-08T23:15:31Z > [@starkle](#): > > No you haven’t. I checked. Please see: > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/14): > > Providing a better-privacy OS for Fairphones, which are very appealing for folks with certain ethical and environmental goals. > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/14): > > There are also circumstances where one may want an alternative to Grapehene for whatever reason. [… check full post …] > This, naturally, put me off of Graphene until he stepped away. I hadn’t installed a custom ROM in a over a decade and needed a place to ask questions. The Calyx community was wonderful. Calyx supporting extra devices and preferring the community are two use cases for choosing CalyxOS. > [@starkle](#): > > It’s not about my priorities, it’s about the Calyx institute’s stated priorities of making phones private. It’s a solved problem. GrapheneOS exists and is very good. It has shortcomings, like limited hardware support. An alternative option that addresses those shortcomings would be a “good” alternative. Calyx doesn’t focus on those shortcomings, and as a result fails in their own stated goal. Calyx’s stated goal isn’t “beat GrapheneOS,” it’s [essentially ‘be more private than stock Android’](https://calyxos.org/). They succeed at that goal. > [@starkle](#): > > Say I had the goal to make phones private. I fork AOSP, work really hard reimplenenting a small fraction of GrapheneOS features, and start collecting donations. You could say I’m succeeding in making phones more private and bringing another option to the table. You could also say it’s a big waste of everyone’s time and money because GrapheneOS already exists and I could have just forked or used that instead. But if I port my work to a couple non-Pixel devices on a whim, suddenly it’s not a waste of anyone’s time and money. That’s roughly how I see this conversation around CalyxOS. As far as I know Graphene asked Calyx not to use any of their code. Also, as has been discussed repeatedly, CalyxOS is not the only thing the foundation does. In any case, I’m glad CalyxOS exists both for the rare cases where it meets someone’s needs better than Graphene and in case Graphene goes sideways or ceases to exist for some reason. I learned the ‘I don’t need alternatives’ lesson with Bromite a few years back. --- ## Post 8 by @anon39279085 — 2025-04-09T08:38:16Z > [@starkle](#): > > Say I had the goal to make phones private. I fork AOSP, work really hard reimplenenting a small fraction of GrapheneOS features, and start collecting donations. You could say I’m succeeding in making phones more private and bringing another option to the table. You could also say it’s a big waste of everyone’s time and money because GrapheneOS already exists and I could have just forked or used that instead. But if I port my work to a couple non-Pixel devices on a whim, suddenly it’s not a waste of anyone’s time and money. That’s roughly how I see this conversation around CalyxOS Say I have the goal of implementing E2EE RCS on top of the signal client, I call it Signal-RCS, I make my first release, Is this considered doing my part to protect user privacy and security or is it considered grifting to you? **[Good] Options matters, especially in a world where the friction is already pretty high for as simple as a messenger app** --- ## Post 9 by @anon39279085 — 2025-04-09T10:45:50Z In the thread > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation-electronic-frontier-foundation/26437/): > > [https://www.eff.org/deeplinks/2025/04/calyx-institute-case-study-grassroots-innovation](https://www.eff.org/deeplinks/2025/04/calyx-institute-case-study-grassroots-innovation) The EFF had just released a blog spotlighting the Calyx Institute. At least from first glance, it seems like the Calyx Institute is very well-funded and have multiple purposes beyond Calyx OS. Of course, Calyx OS is more well-known here for not having feature-parity with Graphene OS, but the organization also offer mobile hotspots as part of their membership tiers. In addition, Calyx hosts a Tor exit node a… It is getting quite off topic than what the post is actually about so I’ve decided I wanted to make a separate post This is the staff’s opinions: > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/35): > > Calyx and Mozilla at least do exactly what they set out to do. They are not _misleading_ their members. Are they doing enough, or are they allocating their resources most effectively? These are totally separate debates, but they aren’t grifting or committing fraud. > > People not doing research and _assuming_ tools like Calyx OS and Firefox are better than they are in reality is not really Calyx or Mozilla’s problem. > > Braxman and Purism actively **lie** to their customers and/or don’t deliver products at all. I don’t think people are applying their standards inconsistently here at all. > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/38): > > What you said about nonprofits is unfortunately true in most cases… > > As for Calyx, their micro-grants do help out a lot of organizations in desperate need of funding. I’m biased of course, but a lot of my past work with EFF-affiliated nonprofits receive some funding from Calyx. I think the main concern is whether that source of funding is ethical in the first place. > > By all accounts, I wish Calyx “best” product wasn’t some tax deducible internet hotspot or a less secure OS. Great for RVers, van-lifers, and degooglers of course but that really doesn’t place much confidence in the quality of their services The rest of the posts are a mixture of debates between they are doing something and no they’re not, so people which is it? If it is possible for [@staff](/groups/staff) could you merge these and similar Posts here if possible? I’ll edit the question out once it’s done… --- ## Post 10 by @bitosi — 2025-04-09T11:43:19Z We were debating the extent. They are doing stuff, but many of us think its not enough or think its futile. Their OS has fallen so much behind Graphene that its absurd. It cant be recommanded in good faith unless someone has a specific motorolla device. --- ## Post 11 by @bitosi — 2025-04-09T11:48:53Z It wont be a grift if you dont mislead users. If you maintain it well and it becomes a viable option then its good sure. I wouldn’t say its bad if you just make an useless project in the end, but the problem is that the OSS market is already oversaturated with disposable projects. --- ## Post 12 by @Eebzter — 2025-04-09T12:07:24Z Where privacy matters these days, one thing really matters and that is having choices. This could be GrapheneOS, CalyxOS, or even /e/OS. Not everybody is looking for the same thing. Some need hardened security, while others just want a phone that isn’t spying on them. GrapheneOS is a stronghold for the security hackers, CalyxOS is adequate privacy without it being a chore to use on a daily basis, and /e/OS is for individuals who just wish their tech were ethical and uncomplicated. Maybe a good use case is starting with Calyx because MicroG is supported and your apps just work off the bat and then you can eventually make your way to Graphene when you’re far down the privacy rabbit hole or even might help them realize CalyxOS is just the right amount of security for their threat model. Privacy always involves trade-offs: convenience, app support, or complete control and it’s important to pick what aligns most with you. Graphene furthers the security envelope for a robust protection with useability tradeoffs, Calyx maintains the user experience while offering a more hardened version of Android, and if one project ever falters, others will be there to carry the load. In all seriousness, having hundreds climb aboard something that’s good enough such as Calyx or /e/ does a lot more for privacy than a few perfectionists on over-hardened setups. That’s why choice isn’t just nice it is also what keeps the privacy movement alive and keeps it expanding. Edit: IMO I find value in what CalyxOS is trying to do --- ## Post 13 by @magictan — 2025-04-09T14:11:33Z > [@Eebzter](#): > > Graphene furthers the security envelope for a robust protection with useability tradeoffs, Calyx maintains the user experience GrapheneOS offers better usability and user experience, since it supports sandboxed Play Services and can pass Play Integrity, while half-assed implementations like MicroG fall short. > [@Eebzter](#): > > while offering a more hardened version of Android More hardened version of Android by being months behind the standard security patches? You are way better with stock or Vanilla AOSP in that case. --- ## Post 14 by @starkle — 2025-04-09T14:54:41Z > [@mika](#): > > Calyx supporting extra devices and preferring the community are two use cases for choosing CalyxOS. Look, when I asked for use cases of CalyxOS I acknowledged the extra devices they support, and said that point didn’t impress me. I also saw your point about the community and didn’t consider it a use case; but I suppose for some it might be. Having a nice community also doesn’t impress me or justify the non-profit, though, if the technical merits of the project don’t measure up. > [@mika](#): > > Calyx’s stated goal isn’t “beat GrapheneOS,” it’s [essentially ‘be more private than stock Android’](https://calyxos.org/). They succeed at that goal. I didn’t say that was their goal. I said the same goal you did. My point is that it’s not a problem that exists. If a solution to a problem already exists, then it’s not a problem anymore. If that solution has shortcomings, then an alternative solution would be useful. But Calyx isn’t focused on addressing those shortcomings. The use cases that you bring up are incidental and don’t justify the non-profit in my opinion. > [@mika](#): > > Also, as has been discussed repeatedly, CalyxOS is not the only thing the foundation does. I know, and I’m willing to believe they do meaningful work outside CalyxOS. I personally haven’t seen it yet. > [@Calyx Institute: A Case Study in Grassroots Innovation](https://discuss.privacyguides.net/t/calyx-institute-a-case-study-in-grassroots-innovation/26437/46): > > Say I have the goal of implementing E2EE RCS on top of the signal client, I call it Signal-RCS, I make my first release, Is this considered doing my part to protect user privacy and security or is it considered grifting to you? That analogy doesn’t track because you’re extending the existing best-in-class solution to have a clear differentiated use case. Even making a standalone RCS app would be useful because there’s a substantial need there. I haven’t accused Calyx of grifting either, by the way, because I’d have to know their intent. --- ## Post 15 by @anon39279085 — 2025-04-09T15:11:32Z It was to see how you would respond to it I bet you would have a very different response with bringing back SMS (but I mainly want to bring E2EE RCS or maybe implement SMS but E2EE on top) --- ## Post 16 by @mika — 2025-04-09T23:48:43Z > [@starkle](#): > > Look, when I asked for use cases of CalyxOS I acknowledged the extra devices they support, and said that point didn’t impress me. I also saw your point about the community and didn’t consider it a use case; but I suppose for some it might be. Having a nice community also doesn’t impress me or justify the non-profit, though, if the technical merits of the project don’t measure up. > > I didn’t say that was their goal. I said the same goal you did. My point is that it’s not a problem that exists. If a solution to a problem already exists, then it’s not a problem anymore. If that solution has shortcomings, then an alternative solution would be useful. But Calyx isn’t focused on addressing those shortcomings. The use cases that you bring up are incidental and don’t justify the non-profit in my opinion. As I said earlier, you are allowed to have your own perspective and priorities. Your views on CalyxOS’s usefulness what about what a project must do to “justify” its existence are totally valid. Please understand that your perspective and priorities are not everyone else’s. I provided you with some reasons one may choose CalyxOS. Those views and priorities are also valid. If you can’t allow that then I don’t think we’ll be able to have a productive conversation. > [@starkle](#): > > I know, and I’m willing to believe they do meaningful work outside CalyxOS. I personally haven’t seen it yet. The topic of this thread is an article about the work they do, like: > [@](#): > > We’re particularly proud of the support we provided to another EFA member, [Surveillance Technology Oversight Project](https://www.stopspying.org/), on the Ban the Scan campaign to ban facial recognition in NYC, and [CryptoHarlem](https://www.eff.org/awards/pioneer/2021#award3) to sustain their work bringing digital privacy and cybersecurity education to communities in Harlem and beyond. Most recently, we funded [Sunset Spark](https://www.sunsetspark.org/)—a small nonprofit offering free education in science and technology in the heart of Brooklyn—to develop a multipurpose curriculum focused on privacy, internet infrastructure, and the roles of the public and private sectors in our digital world. I don’t live in New York City so I’m not familiar with those specific initiatives but on first glance they seem meaningful. --- ## Post 17 by @anon46412288 — 2025-04-10T04:31:44Z > [@magictan](#): > > can pass Play Integrity No, no custom ROM can pass Play Integrity at the current moment. [GrapheneOS also can’t pass Play Integrity.](https://arstechnica.com/gadgets/2024/07/loss-of-popular-2fa-tool-puts-security-minded-grapheneos-in-a-paradox/) And for what it’s worth, [microG supports Play Integrity now as well](https://github.com/microg/GmsCore/releases/tag/v0.3.6.244735) (though it doesn’t really _work_, but it’s not like other implementations really do either). --- ## Post 18 by @magictan — 2025-04-10T05:27:15Z Don’t mix between different levels of the Play Integrity API. I didn’t say it can pass the meets\_strong\_integrity API. But banking apps actively whitelist GrapheneOS, see here: > **[Play Integrity API - GrapheneOS Discussion Forum](https://discuss.grapheneos.org/d/19557-play-integrity-api/4)** > > GrapheneOS discussion forum > > > ### Is there an existing issue for this? > > - [X] I have searched the existing iss…ues > > ### App name > > Yuh - Your App. Your Money. > > ### Link to app > > https://play.google.com/store/apps/details?id=com.yuh&hl > > ### App version > > 1.30.10 > > ### Country of the app > > Switzerland > > ### Build Number > > 2024091900 > > ### Device list > > Pixel 8 Pro > > ### Profile app tested in > > Owner profile, Secondary profile(s) > > ### Google Play installed? > > Installed > > ### Where did you install this app from? > > Google Play Store > > ### Google Play services Network permission revoked? > > - [] Revoked > - [X] Not revoked > - [] I did not have Google Play services installed > > ### Native code debugging > > - [] Allowed > - [X] Blocked > > ### Exploit protection compatibility mode > > - [] Enabled > - [X] Disabled > > ### Memory tagging extension (MTE) > > - [X] Enabled > - [] Disabled > - [] N/A > > ### Dynamic code loading via memory > > - [X] Restricted > - [] Allowed > > ### Dynamic code loading via storage > > - [] Restricted > - [X] Allowed > > ### Stock OS compatibility > > - [X] Works > - [] Does not work > - [X] Not tested > > ### NFC payments > > - [] Works > - [] Works but requires another service > - [X] Does not work > - [] N/A (Not supported by app) > - [X] Not tested > > ### Description of the app's functionality > > This app requires to be installed with the Google Play Store otherwise you will get a message and won't be able to use the app. It won't work if installed from Aurora Store. > > Everything works normally except it's not possible to do NFC payments with Google Pay on GrapheneOS (Thanks Google...). > I didn't test though. > > ### Are there any extra notes you think users should know about? > > _No response_ > > ### ADB logcat of the app if necessary > > _No response_ Remind me again how the MicroG garbage does it? Spoofing it came from Play Store? On GrapheneOS, it really comes from the Play Store. > **[Android | Madaidan's Insecurities](https://madaidans-insecurities.github.io/android.html#microg-signature-spoofing)** --- ## Post 19 by @anon46412288 — 2025-04-10T06:11:48Z > [@magictan](#): > > But banking apps actively whitelist GrapheneOS, see here You made a blanket statement that GrapheneOS can pass Play Integrity, didn’t mention what levels it passes. And while some banks like the one you linked reached out to explicitly support GOS, there seem to be many others [that don’t support GOS](https://github.com/PrivSec-dev/banking-apps-compat-report/issues?q=is%3Aissue%20state%3Aclosed%20label%3A%22Not%20compatible%20%E2%9A%A0%22) (or any other custom Android distribution for that matter). > Remind me again how the MicroG garbage does it? Spoofing it came from Play Store? No? Why should it spoof that for Play Integrity support? microG’s current SafetyNet implementation is also signed by the official server. ![microg](//forum-uploads.privacyguidesusercontent.com/original/2X/3/3422c9bff5e5019a7590668bcd1f69d9f0142d55.png) And from the release page I linked : > This release ships with an initial implementation of Play Integrity based on our previous work on SafetyNet. You can enable it using the device attestation toggle in SafetyNet settings. Note that, just as SafetyNet, this feature currently requires running proprietary DroidGuard code on your device. --- ## Post 20 by @anon46412288 — 2025-04-10T11:30:59Z As for the question itself : As a daily user of CalyxOS, and a person who has engaged with the devs, has made various bug reports and have been a user of the project since at least 2023 - I can’t agree in the slightest that the Calyx Institute is a grift. Their goals are clear - it’s to provide a deGoogled experience. Is CalyxOS aiming to be an OS that is completely hardened against every threat vector, every class of exploits possible and what not? No, it has never claimed to be that. Even if you want to believe that the CalyxOS is 100% grifting, you can not deny work they have done [on projects like F-Droid](https://calyxos.org/news/2023/09/04/f-droid/). And you definitely don’t really [fake things like this.](https://ioc.exchange/@calyxinstitute@mastodon.social/113549920547172013) --- ## Post 21 by @noname2213 — 2025-04-10T11:39:32Z … what happen really ? --- ## Post 22 by @bitosi — 2025-04-10T15:03:49Z Hmm amazing. They helped create the wost OSS store. --- ## Post 23 by @anonymous318 — 2025-04-10T15:20:41Z > [@bqfls](#): > > u can not deny work they have done [on projects like F-Droid](https://calyxos.org/news/2023/09/04/f-droid/) Torsten was contracting for F-Droid (and SeedVault and Briar and Guardian Project) long before CalyxOS existed. This is part of Calyx’s repeated attempts to make claim on things they did not make. > [@bitosi](#): > > They helped create the worst OSS store. It is objectively the best FOSS store and secondly F-Droid was around for nearly a decade before CalyxOS existed. --- ## Post 24 by @Regime6045 — 2025-04-10T15:41:55Z > [@bitosi](#): > > wost OSS store. Well yeah, it’s the only relevant repo for Android FOSS app. So it’s the worst and the best and everything in between. And no, Obtainium is not a store and Accrescent doesn’t care about free software (and has a tiny app catalogue). --- ## Post 25 by @KevPham — 2025-04-10T15:42:52Z I merged a few posts from the last thread. The process was quite messy, so my apologies for that! --- ## Post 26 by @anon46412288 — 2025-04-10T16:02:26Z > [@anonymous318](#): > > This is part of Calyx’s repeated attempts to make claim on things they did not make. What? I fail to see what part of the blog post makes me believe Calyx is the first organisation to make a sponsored position for F-Droid lmfao. --- ## Post 27 by @anon39279085 — 2025-04-10T16:31:17Z yeah thank you just wanted to follow the on topic rule so. (that rule > [@A reminder on keeping threads on-topic](https://discuss.privacyguides.net/t/a-reminder-on-keeping-threads-on-topic/25882): > > I want to give a gentle reminder to keep threads on-topic. If you want to start a side discussion that is is prompted by an existing post, but does not serve the original conversation/topic, please use Discourse’s reply as linked topic feature. This is a great way to politely split off the conversation in the original thread, keeping that thread on-topic, while giving you the freedom to have a conversation about a new idea. This will create a link between the two topics that people who are in… ) --- ## Post 28 by @bitosi — 2025-04-11T14:44:13Z > it is objectively the best FOSS store Decided by your subjective opinion? --- ## Post 29 by @anon48875053 — 2025-04-14T12:18:27Z > [@anonymous318](#): > > It is objectively the best FOSS store and secondly F-Droid was around for nearly a decade before CalyxOS existed. Would recommend everyone to read this article: > **[F-Droid Security Issues](https://privsec.dev/posts/android/f-droid-security-issues/)** > > F-Droid is a popular alternative app repository for Android, especially known for its main repository dedicated to free and open-source software. F-Droid is often recommended among security and privacy enthusiasts, but how does it stack up against... It was recently updated, so not many people had read it after the update. F-Droid is objectively not a good source for your applications. All of your FOSS apps can be obtained using Accrescent, Obtainium, Aurora Store, or even the sandboxed Google Play Store.