A random deployment is certainly risky, but no riskier than a random apk. I’d argue the random deployment is less risky because it’s easier to inspect it in the browser and see what it’s doing with your password. But of course both are to avoid. Self-hosting or compiling your own clients if you can, official deployments or releases otherwise.
Sure. Both compiling your own apk or self-hosting are ideal. If you’re not doing either though, the web app is more easily inspectable.
Its less dumb than entering it into a regular app compiled into an apk, which is more opaque (even if it’s also FOSS). Voyager you can host it yourself.
Voyager (formerly wefwef) is a self-hostable web app, so it doesn’t have this problem. Of course this only means you can inspect the code you’re running. You still have to able to understand the code to be sure it’s not doing anything malicious.
For a serious game I’d recommend UnCiv, imho the best adaptation of Civ to the mobile form, even counting official games. Very frequently updated.
For casual games, I like:
Lona: like Snake from old feature phones, but with circular motions. You’ll understand it when you see it. Familiar and fresh gameplay at the same time. Difficult to master and keep beating your highest scores. Very addictive.
Vector Pinball: as it says on the tin, just an honest to dog, simple pinball. Many tables to choose from.
I’m also addicted to Poland can into space, which is a stupid game with bad gameplay, but fun nevertheless. :)