Hacker News Reader

Have you looked at Obtainium? https://github.com/ImranR98/Obtainium It can use apkmirror and apkpure as sources. Along with lots of others.

I'm not particularly security conscious, but this seems very vulnerable to malware.

How so?

How does one verify the integrity of the APK's?

I mean, no more than getting things from apkmirror/apkpure? This is just an easier way of doing it.

Personally I mostly just use it with github, and checking the integrity of those apks is easy enough.