It can help some, but it would still be a problem because the trolls can go after the distributors. For example, the package would then have to be in the Debian

It can help some, but it would still be a problem because the trolls can go after the distributors. For example, the package would then have to be in the Debian non-free repo, rather than main.