You make a good point! I don't know exactly how the internals of debian's package management work but I do know that it downloads packages from mirrors, probabl

You make a good point! I don't know exactly how the internals of debian's package management work but I do know that it downloads packages from mirrors, probably unpacks the archive, verifies gpg signatures, parses metadata and starts resolving deps, extractice archives, launching scripts/triggers. Maybe if I have a better understanding of Nix internals like you it won't feel like a black box.