My wishlist for embiggening package security: Signed checksums of binaries baked into the package manager Reproducible builds made dead-simple stupid-easy Se

My wishlist for embiggening package security: Signed checksums of binaries baked into the package manager Reproducible builds made dead-simple stupid-easy Selinux/sandboxing made more transparent and simple enough to use for mere mortals Something like tripwire, by default (I think netbsd has this built in, but it's not default)