@dalias @gnomon Probably should be part of the work of distros but sadly they are typically inclined towards "let's ship everything unless proven bad" rather than careful prior evaluation of at least a clearly defined subset.
Like BSDs somewhat do this for their base-systems but you don't get a complete desktop without pulling from the much more relaxed ports, which at least are clearly separated.

I guess F-Droid still does careful evaluation and patching of anti-features (been ages since I last used Android), I've often wished it would influence other repositories.