The binaries in the Releases section can be random binaries. Owner of the package can just upload malware or an app that is only slightly different to the original code. This app isn't just distributed through GitHub but also elsewhere. Obsidian, a proprietary note taking app, has a Releases page o...