All of tachiyomi extensions are APKs since a long time ago. Previously we just trust it because it’s hosted by tachiyomi itself. So you should still worry about the trustworthiness because it’s hosted by unrelated person, but shouldn’t because it’s apk.
Maybe in the future Mihon should implement support for non-apk extensions, but for now we can only use that
Quick scanning of the repo, Mihon didn’t host or even mention the extension to read external source. So it basically just an application platform. If Kodi still survive, I think this will too.
The mistake of tachiyomi is putting the extension to read piracy website together with the base application
In 2000s at least in SEA most likely the installed windows when buying a new PC or Laptop is pirated copy. Even now you can request that if the laptop is not bundled with Genuine Windows
But if you do it fast enough, you can call it Machine Learning