Be aware that this is a closed source app, and since lemmy doesn’t currently have proper oauth, that it could potentially be storing your login creds. Be very wary of any lemmy app that isn’t open source.
That said, this dev is a legend and has been around for over a decade. His reddit app was monetized directly through buying a pro version of the app.
I’m a big fan of trustless computing, which requires apps to be open source, or at the very least, source available.
Trust and security just don’t mix in my eyes, since supply chain attacks are much easier when using a trusted platform vs a trustless platform, where it’s still possible to perform a supply chain attack, but since there are more eyes on it, it is much harder.
If it ever gets sold to a big corporation I’ll feel the same way but as it stands it’s been developed by one guy who has gained my trust over a decade.
I understand there are inherent risks in that and I approach it on a case by case basis.
An Open Source app that you don’t compile yourself after reviewing the source code has the exact same risks.
There is no guarantee that the version of Jerboa you install from the Play Store corresponds to the source code you see on GitHub.