Well, the direction is wrong but it's along those lines - the installer has support for what we call fill-in packages, which is a description of a Debian package with a script 'nit-fillin'. When installing, the script is loaded and files from firmware/initfs / downloads are filled in the package, and dpkg-deb --build is run and put in a local apt repository for the Debian apt-get to get it from.

The process cannot complete without having the files actually there and having a OS2008 installation on your firmware / an actual internet tablet (from our code perspective). For files where we get packages from the repositories, we apply same method as is open sourced in the apt-get patches from Maemo, so it requires having a valid component_version. Those checks would put us in same category as let's say apt-getting those packages, or backing up your firmware to MMC, as we don't in any way distribute copyright infriging material in our installation and base packages (which are just scripts).

If people choose to redistribute some of the firmware-based .debs in their local apt repository it would not be legal, obviously, and I've noted this on the wiki since the start.