I agree with livefreeordie, with respect to filtering a single repo, so long as everybody is free to download/install what apps they want from elsewhere. It could make the N900 more foolproof for those who need protection that way.