The packaging technology is not the issue here, it's about the repository. If you made an apt repo where anyone could claim an unused name and start uploading p

The packaging technology is not the issue here, it's about the repository. If you made an apt repo where anyone could claim an unused name and start uploading packages, you'd have exactly the same issue.