It could also reveal information about your system that could be used for exploiting. E.g. you have a package installed that can be used for privilege escalatio

It could also reveal information about your system that could be used for exploiting. E.g. you have a package installed that can be used for privilege escalation once compromised. Not to mention the additional possibility of exploiting apt itself vs. having to exploit the TLS stack (which goes trough a lot more scrutiny).