I see it as more of a security issue. If your distro is all about security then bundling is really bad and you shouldn't allow it if your distro is about allow

I see it as more of a security issue. If your distro is all about security then bundling is really bad and you shouldn't allow it if your distro is about allowing end users to use whatever software they like regardless of how it is packaged then you shouldn't care. Just warm your users of the potential dangers installing the package may cause and move on.