> ... or I have to add a repo from some guy I don't know or trust.

The Debian PHP maintainer, Ondřej Surý, maintains his own repo:

* https://deb.sury.org

* https://packages.sury.org/php/README.txt

* https://qa.debian.org/developer.php?login=ondrej%40debian.or...