Google learns about your web activities via Google analytics/ads that are built into most websites on the internet. If you use Google play, then Google also becomes aware of what apps you install on your device, and other device information that they cannot obtain only via browser js.
edit: relevant wikipedia page
Implementing such statuses would be useful,
the question is realization and resources.
as they say, uncertainty is worse than war.
Sorry, I wasn’t aware that you weren’t aware of this policy when I explained earlier, hope this clears it up for you:
When Google Play signals that a download of FDroid is allowing an older and insecure app to function, is that a true issue or is this Google being brutish ?
My device is Android 13 …
These Play Protect warnings will show only if the app’s
targetSdkVersionis lower than the device API level.
Technically true.
I want to add my own take on this.
It is kind of funny that this thread started so close to this happening but the Fennec/Mull browser on F-Droid has a period of 3 months where it didn’t receive updates at all between August 21, 2024 and November 3, 2024.
gitlab<2 links for new user huh>com/fdroid/fdroiddata/-/commits/master/metadata/us.spotco.fennec_dos.yml
I get that F-Droid is FOSS first, but if a browser does not get updated on time, then I would argue that no one should use it at all. I would take proprietary bits over an actively exploited browser anytime.
At the time, I migrated to DivestOS’s repo but it has since shutdown.
Yeah Divested Computing Group has been shut down, this is not a good example get something better…
It is a good example. Please provide why it is not.
I already said the reason? You gotta be joking right.
If you want an example take apps like:
Update Me, Dicio, LocalSend, RHVoice, App Manager (I have myself) yeah they have not been updated for the 2+ Months at least (on F-droid) 
but whenever apps are frequently updated or not isn’t the point here.
You misunderstood.
My point was that upstream released new build but F-Droid didn’t, leaving users vulnerable.
All apps you provided are build close to upstream except Update Me (can’t find it), RHVoice (doesn’t tag updates) and AppManager (doesn’t build pre-release).
The fact they shut down mid december doesn’t have anything to do with fdroid not releasing updates between august and november
F-droid build servers are kinda outdated
https://x.com/TommyTran732/status/1877380637549629861
I’d just obtanium from github, there autoupdate is sort of slow though.
F-droid “Basic” atleast fixes the client API level thing.
This article raises good questions - > https://privsec.dev/posts/android/f-droid-security-issues