For safety, APKMirror is best. For direct-from-Google without login, Evozi is the simplest. For paid app backups, Raccoon (or similar) is required.
The short answer: