There are a few guides and things at Jolla Zendesk
but yeah for a someone new to the OS I can imagine it can be a bit overwhelming.
The good news is that there are loads of helpful people here and on IRC who can give you a hand if you get stuck, but my first port of call is to search this forum and it’s forerunner TJC.
The Jolla store is a great source of vetted apps, and OpenRepos contains software that might not be allowed to enter the Jolla store due to their stricter rules.
Recently there’s another native repository, Sailfish Chum and there’s a discussion about it right here, I wouldn’t be overly concerned about it as most of the software there tends to find it’s way to Openrepos pretty quickly, and there’s talk of integrating Chum into the latter as it doesn’t have an app to browse through it yet.
I can’t speak for others, but I do have apps installed from the majority of those sources, I trust F-Droid and Aurora store, and sometimes a good app source (eg Whatsapp from their website).
I’m not sure if it’s possible to discern where apps have been installed from, for me personally the stock apps come from the Jolla Store, and then most of the native ones come from Openrepos. With Android I tend to grab most stuff from Aurora.
Security updates are incorporated with OS updates, which you will get a notification on the Event scree, but you can check manually by opening the Settings app > Sailfish OS updates and pulling down the pulley menu there to check.
You will get a notification from the Jolla store for any updates there, Openrepos, F-Droid and Aurora require you to open the app. (Aurora does have an option for running it as a service to automate updates, but as I want as little as possible running at any given time, I haven’t investigated whether this will work on Sailfish).
There’s an application called AlienDalvik Control in openrepos which gives you easy access to the Android Settings app (AD Control can be found as an applet in the Settings app once installed). This will give you details about Android apps.
If you explore the Storage section of the main Settings app you can find out the total memory usage of native apps, for more granular data the command line is your friend. You need to enable Developer mode in the Settings app, then open up the Terminal app and these commands from here will do the job:
List all installed packages and their sizes (in bytes):
rpm -qa --queryformat '%{SIZE} %{NAME} \n'
List top 10 packages, sorted by size:
rpm -qa --queryformat '%{SIZE} %{NAME} \n' | sort -n -r | head -10