It really isn’t. While the requirements are less strict than for the main repo, there is a review process to add a new app and I think they also have some automated checks. Additionally, Izzy (the maintainer of izzyondroid) is (was?) a member of the fdroid team.

Does this mean that every app there is legitimate? Of course not, but the same can be said about any other app store/repository.