A fudamental point that seems to be being missed here is that it's not the repository that risks causing problems, it's the apps in it. If you install the same apps by another route you're just as much at risk.