Comment by bpye

This actually seems worse from a security perspective to me than allowing installing apps on device.

Your email client from F-Droid has an RCE? Too bad - better hope you update manually!