Thank you for the information. According to the linked XDA discussion:

"Evozi's fork is based on opensource 1.4.x, with tracking code and removes validation for undownloadable APKs as a fix for new play store. Besides this, it also removes the copyright header of background.js, adds more tracking and some textual changes (adding links to his own apps and social accounts)."

http://forum.xda-developers.com/showpost.php?p=44032616&post...

"In any case, both of those still require having the Android device registered with a Google account."

Not exactly. They require having _an_ Android device registered. As long as you've once registered a device, it will stay associated with your account. It doesn't have to be the same device as the one onto which you want to install the downloaded APK.

Wow, I had no idea about the spyware. I learned about Evozi from: http://www.labnol.org/internet/download-apk-from-google-play...

That labnol site has some great tips, and is well written, so I trust things I find there.

I'm trying to understand what this means. Does it mean that evozi has added spyware to the apks I've downloaded? I've used this to get all the apps that were not in F-droid, so I'm quite concerned.