How does zap.store currently compare to the F-Droid repo and Obtainium? Is it the same trust model as F-Droid?