My flow for downloading apps on a fresh graphene install : 1. Download Accressant from built in app store pre Installed on graphene 2. Download "app verifier" 3. Download @Zapstore APK (make sure you verify this using app verifier - zapstore publishes hash on nostr page) 4. 90% of apps downloaded on zapstore & of course use app verifier to check hash given for each app you download Bonus 1. For apps via playstore either use a seperate profile or "private space" on main profile to keep Google Play seperate. You can download both from pre installed graphene app store 2. F Droid is also a great FOSS option. Download apk (f-droid.org) and verify using app verifier