About proliferation of repositories, the Security Framework is a guardian that didn't exist before. Installing a non-recognized repositories will be possible only in the open device mode. As said, Extras is *the* recognized community repo according to the current plans.