> HTTPS does not provide meaningful privacy for obtaining packages. That's a very subjective and circumstantial statement being passed off as fact. Just becau

> HTTPS does not provide meaningful privacy for obtaining packages. That's a very subjective and circumstantial statement being passed off as fact. Just because one can list a few scenarios where HTTPS wouldn't prevent a malicious actor from achieving their goals, doesn't mean HTTPS does not increase security/privacy for apt in other situations. Further, in certain contexts, guessing and proving are not fungible.