Apart from the outstanding questions about QA and workload (which are pretty big outstanding questions!) and my nit about it including user-friendly codecs and the like; this may still be the best approach for applications which don't have a daemon.

It doesn't answer the question about them being in /downloads/ (perhaps only if the author can be bothered to) or what section they appear in in that repository (presumably the standard set so they appear in HAM). If even some appear in Downloads, it's only a matter of time until someone accidentally gets the repo enabled and sees more stuff than they wanted.

Perhaps, even if solution #5 is selected, it should be combined with solution #4. I'm loathe to create a new solution as many votes have already been cast and will people re-vote?