Opt-in to Arm Memory Tagging Extensions (MTE)

This is an easy security improvement (at least for users with Google Pixel 8 and later, which have the hardware for MTE).

fdroidclient doesn't have any explicit native code, but there are some .so files in the APK (from Compose?), and also Android framework code that fdroidclient calls might have native code. All of that runs in the app's process, so opting in to MTE will cover that. fdroidclient parses potentially attacker controlled data (repo listings, screenshots, ...), so enabling MTE is an easy defense-in-depth.

I've been running F-Droid on GOS with MTE force-enabled for a few months now without any issues.

For background on MTE, see:

• Android docs: https://source.android.com/docs/security/test/memory-safety/arm-mte
• My blog post 😇 : https://thore.io/posts/2025/09/introduction-to-arm-memory-tagging-extensions/