@fdroidorg at this point is being used to push out an app with sensitive permissions that’s been taken over by an unknown individual who refuses to engage with its large community of users and developers.
I STRONGLY recommend disabling updates from Fdroid, if not uninstalling and manually installing 2.0.11.2, or installing the Google Play version which has a different maintainer.
this is extremely shady and it’s just looking worse as time goes on. I’ll link to the Syncthing forum thread from about where I left off last time in a subsequent post.
It is not Syncthing. It is Synchthing-fork for Android, which was specifcally forked from Syncthing for Android to improve over it.
The real Syncthing team then some time ago decided to discontinue their Syncthing for Android app, not the other versions! Then Syncthing-fork became the only way to connect to Syncthing on Android (aside from running the original Syncthing via something like Termux).
Just want to be clear on this. Syncthing is not compromised in any way. Syncthing-fork for Android might be, might be not.