As i said, security is only as good as the testing. Living is risk-taking but, given a hard pitch to climb, i'm going to go with the belayed approach over free climbing.

I'm not opposed to improving security or the -testing process, but that's got nothing to do with this thread except that an attempt was made to suggest that repos are less secure than installing arbitrary .debs, which is clearly false.