With F-droid you trust F-droid to build the binary from the developers’ source code

Not when using a self-hosted F-Droid Repo - which is the case for Ironfox.

because it takes a like 3 or 4 minutes to boot

What kind of PC is this? Does it have an SSD?

saying there are unspecified “known vulnerabilities” within Signal

His source: Trust me bro

There are some more privacy friendly forks of “Firefox for Android”, which have sponsored shortcuts disabled or minimized by default. For example:

• https://gitlab.com/relan/fennecbuild
• https://gitlab.com/ironfox-oss/IronFox

Feel free to give them a try :)

The same apps that have access to more of your data (because they’re not sandboxed in a browser), use electron (ships a browser) and include trackers that one can’t simply block with an extension?