Originally I've download the signal app through playstore, but often it also get updates from Droid-ify(Fdroid client). Today its weird and I got this . Explain to me this.
On the Droid-ify the signal app is provided by: org.thoughtcrimes.securesms
I generally agree, but in this case, Google Protect actually protected OP from installing a harmful app masquerading as Signal.