Hacker News Reader

And how did you verify its integrity? And what is the upgrade path?

The releases are signed with well-known keys.

But if you don't trust the devs you'll need to use other software, yes.