A reading of the official install path, in four short checks.
A reading of the official install path: the download page, the source check, the storage check, and the post-install check. The slow read before any APK install.
Check the source before the download starts.
The first check: the URL bar. The second: the certificate. The third: the page itself. The fourth: the package name.
The first check is the URL bar. The official download page is on the consider11in.com domain; the URL bar shows the lock icon and the domain. If the URL bar shows a different domain, do not start the download. The habit is the cheapest read on install safety.
The second check is the certificate. Tap the lock icon; the certificate is issued to consider11in.com. If the certificate is issued to a different domain, close the page. The third check is the page itself: the page has a single, signed download link, the SHA-256 hash at the top, and a small list of install steps. If any of these are missing, close the page.
The storage check, the post-install check, and the small list of habits.
The third check: storage. The fourth: post-install. The small list of habits that protect the device.
The third check is storage. The app is about 60 MB; the install needs about 200 MB of free space. Reading the storage setting on the device is the cheapest way to know whether the install will fail. The fourth check is post-install: open the app, read the permissions list, and deny any permission that is not needed.
The post-install check is the most-ignored step in the install path. Reading the permissions list is the cheapest way to know what the app is asking for, and the right time to deny a permission is the moment it is asked for, not after the install has settled.