1. Zapstore where possible. 2. Obtainium or F-Droid if available otherwise. 3. Sandboxed Google Play Store as a last resort, and enable exploit protection compatibility mode if the app doesn't function properly. 4. Web app instead of Android app if none of the above work. 5. If all else fails, ditch it and find an alternative if one exists.