Regardless of company size or popularity, that is sketchy. While not perfect by any means , google play affords some security scanning and privacy awareness info on apps that are published there. Others are probably right. And I bet DJI probably wanted to skip that step to trade for ease of management. But any time you install something off a non play store repo you take on a little extra risk.