I don't remember last time I read about malicious code found on an app here:
forum.f-droid.org/
Code is available, and license allow the project to distribute them.
Hardly anybody uses F-Droid, comparatively. The people that do are generally less likely to fall for simple scams.