The (deb-) change should start from the Debian or from Ubuntu. They should see the importance. And yes, it is a problem. All software could have *.spec file written for it already by the developer and use cryptographic safe packages from the start when they are just distributing test packages for their alpha-testers. It would be safer and chances to get Trojan horse to Linux ecosystem would be smaller. It would solve some of the problems and would be the good start to get more non-fragmented ecosystem for commercial companies making software for Linux.

Linux Foundation is right not to give permission to use "Meego"-name for N950 unless it uses rpm-package system. We do not want nor need more fragmentation in Linux ecosystem than there already is.