[theage]

Github reserve the right to stop serving those release downloads at any time. They usually just kick you off entirely if your project gets unwanted attention. I don't see them allowing revanced (modded popular social apps) forever so we still need a better way to trust outside that touch and go easy relationship.

[CommanderData]

Your app is a massive target, if your domain or web server is taken over, what implications would this have on the end users using your app (if any)?

[theage]

If it's a social app users should worry about account take over making you look bad/illegal or tricking you to enter your password to other OAUTH accounts. Privacy implications etc. Similar to if the app owner changed hands to someone trying to milk it. As always you be suspicious of any permission asks to limit damage in these cases.