My comment wasn't really about the merits of central authorities vs multiple authorities (although I would fall on the side of preferring a single package repos

My comment wasn't really about the merits of central authorities vs multiple authorities (although I would fall on the side of preferring a single package repository than having to worry about many of them). It was about having two equivalent mechanisms for solving the remote-code-loading problem, regardless of where you're actually loading it from.