Yeah, no-one realised that apt-get would work. I'm guessing we'll get per-user virtual repositories, with the Packages file limited to those apps which have been "downloaded"/bought through the web UI. Not foolproof for preventing piracy, but probably Good Enough[TM].