With F-droid you trust F-droid to build the binary from the developers’ source code

Not when using a self-hosted F-Droid Repo - which is the case for Ironfox.