

You really don’t know how researches work… they get to be in multiple projects globally, specially when in a university… that us why of their name. Besides, the US is highly sensitive with confidential information and for the most ridiculous things you need “security clearance” that he will never get even the most basic one. Today, most on the spying in not done presentially within the target country, let alone with such a prominent position.
I presume the concern is governments banning apps left and right so a federated repository will be mostly immune from that. But you are right, technologically is not as straight forward.
What surprised me is that F-Droid is avoided by many FOSS enthusiasts (due to signing it themselves so delayed updates and potential tampering). Aurora is great but 100% on Google’s merci and Google frequently cuts its winds. Did not know Aptoide was community based… have to check it out.