They follow bad practices. For example it takes them too long to update apps, with no appreciation to the update (meaning if there was a critical CVE ), and other. Look at this site[1], showing some reasons why google play store is preferred.

[1] https://wonderfall.dev/fdroid-issues/

>For example it takes them too long to update apps, with no appreciation to the update (meaning if there was a critical CVE ), and other.

Fully agree, have some experiences.

Friendly advice: treat Fdroid like any other development dependency and try to be in control rather than being dependent: run your own f-droid repo which people can add to their Fdroid app as a source.

Agreed. Using GitHub is already a better option since it's eliminating another party (Fdroid).

Self-hosting a F-Droid repo means users can easily get automatic updates, which is important for security.

But it requires self hosting.

Would it be possible to host an fdroid repo on GitHub pages?

I don't see any reason why not. After all, GitHub pages is a repo, which you can upload an APK to.

Isn't that up to the developers of the individual apps?

No because they compile the apps and not the developers.

F-droid is flawless in terms of security.