if u can check and compile the app yourself, that's fine too - ie nsec.app unlike amber which is a compiled android app which means U have no way of verifying that it's from the source in their git