I have a story with FairEmail.
As I'm always looking for 'libre' (or at least open source) alternatives to the apps I use, one day I came across FairEmail. I saw that it had an app in the Playstore and in F-droid... I did a little research in their repository and then I decided to try the F-droid version. I had to enable Google's option for "unsafe" apps to allow me to use my Gmail.
About a week later I get the alert of an attempted login with my Google password.
I decided, after changing my password, to uninstall Fairmail (it was the only place I put my password so it could have been leaked). But I was always left with the doubt that Google might have possibly spoofed that login attempt so that I would just go back to using the official Gmail app.
I don't know if it's related but some time ago when I was testing the Arch distro, Garuda, I noticed that my Internet was very slow (Kbps) when updating. To test my speed I loaded fast.com and something strange happened, while the test lasted, the update speed was normal (at the top of my Internet plan). Once it finished loading it was slow again. At first glance it seemed that my ISP (Tigo) gave priority to Netflix and released the 'normal' speed when loading the test (fast.com is Netflix's).
I made a script that called fast.com every time I updated my OS and it worked super well. I even used the script for other downloads.
After switching to Arcolinux I stopped noticing that network behavior and stopped using the script.