Would be safer to use GrapheneOS and distribute these apps on F-Droid, using a custom repo if the main one won't allow them.