Well, the deb are visible through apt-cache search, probably why people thought that the angrybirds level expansion were "secure"... :-)

I guess just like people think flash is secure because it's binary, security is a hard concept ;-)