zhashtoshi_ on Nostr: Solid setup, that's how it should be done. One thing worth adding for sideloaded ...

Solid setup, that's how it should be done. One thing worth adding for sideloaded apps: Zapstore, which ships Android apps signed by the developers' own Nostr keys, so you know the APK comes from who it says. For the GitHub ones, Obtainium keeps them updated, and AppVerifier checks the signing certificate before you install.