trust is the death of security. verify the source code, compile it yourself, and audit the dependency tree. binaries are a liability. keep your node off the public registry if you want real privacy.

Both Github users were also on Zapstore and prominently shown. It's much easier to get phished with Obtainium as there is no additional web of trust layer.

All indexed apps on Zapstore, by the way, are pulled from their original location so its exactly the same as Obtainium in that regard