I'm not making a moral judgement, maybe 'pirate' was the wrong word. It probably was something like APKMirror, and my point was the chain of trust is broken (you have decide to trust that site and its provenance model) vs an HTTPS download from the Slack domain.