There's also /e/ - another, more opinionated Android distro also using MicroG (and LineageOS...)[1], along with freemium Nextcloud hosting. I threw it on an old Nexus 5, seems interesting, if a little still-in-alpha.
So "shady" might not be the right term..."untrustworthy" might be a better one, until they prove otherwise.
To be sure of the integrity of a binary and what it does, one must build it from source code that one has verified.
Making strong claims about privacy and then bundling pre-built binaries found on the internet (no matter what the site) does not inspire confidence in me about the team or its supposed dedication to privacy.