There's a limited amount of room to exploit this, this so long as signing is handled correctly. The Debian Apt system worked this way for a long time. Of cours

There's a limited amount of room to exploit this, this so long as signing is handled correctly. The Debian Apt system worked this way for a long time. Of course, a lot of code signing systems are mismanaged, so...