F-droid acts as a trust for all the apps you download through it, which means if F droid is hacked, hackers can push fake update to all the apps. It is an issue, but not the biggest concern of average joe. Although F-droid should take it pretty seriously.

But I think hating on them is not the solution…

I completely understand, but this only adversely affects you if f-droid getting hacked is in your threat model. And not everyone have that.