Since we're kinda off in la-la hypothetical land with the discussion, let me throw at you a scenario: it is discovered that a popular app in Extras has a timebomb built into it that will do something really heinous in one more day. What do we do?
First of all, we do need a demote button and it does need to be accessible to official testers.
They need to be able to demote something from Extras found to be in violation of QA criteria, and able to throw testing versions back to -devel when blockers are discovered (to avoid wasting tester's time).
Second of all, the system needs a built-in facility to inject a stub package into Extras that displays a customized message when installed or executed.