Regardless of company size or popularity, that is sketchy. While not perfect by any means , google play affords some security scanning and privacy awareness info on apps that are published there. Others are probably right. And I bet DJI probably wanted to skip that step to trade for ease of management. But any time you install something off a non play store repo you take on a little extra risk.
I went to a private religious school and they made a rule that there couldn’t be any PDA (public displays of affection) between opposite sexes. And they ruled that pretty well with an iron fist.
So we took that in the opposite direction, and I don’t think the administration ever saw so much guy on guy slapping of butts, “Hey bigais”, or pecks on the cheek in their lives.