So you claim having transaction support in a package manager is no improvement ? And also you claim it is no practically any safer having GPG signatures in packages embedded than detached somewhere in the repository and lost by many in transfer? If so, then either you are not honest or you do not really seem to know much anything about C.S. LSB wouldn't had made a standard about package manager, if it wouldn't be important. And Nokia's case is a very good example how expensive it can become when Linux fragmentation hits like it has in this case.