And enable 2FA if you can. Sure, it's annoying to have to dig out your phone (or browser extension, desktop app, etc.) for a code, but it's better than having your account taken over.
Is there any sort of advantage to getting it from the F-Droid repo as opposed to IzzyOnDroid? I have it from IOD and haven't encountered any sort of issues.