Droid-ify is an F-droid frontend, that is also in F-droids repo as an installable app so it’s safe, in this case one of the F-droid repos OP has is actually malicious and is installing a modified version of Signal, the package name is wrong org.thoughtcrimes.securesms, it should be thoughtcrime without the S.

I think Play Protect is intrusive, but this time it actually tried to protect OP from a malicious Signal clone.

They also offer a version with KDE Plasma preinstalled as the desktop, but the dev/maintainer personally uses Gnome so the KDE version gets less attention from them, though that doesn’t mean it’s bad, just not customized like the official Nobara version, it’s just vanilla KDE Plasma

I’ve been keeping my eye on them, I personally am not going to use them until they get some reputation both to know if they can be trusted, and to see if they won’t randomly disappear or shut down.

They refer to themselves as “Web3-native” and are affiliated with cryptocurrency stuff for anyone that this plays a factor into deciding to try them or not. Personally it makes me hesitant about them, but to each their own.