I don't think that would work with most distros, since you're fetching an (also signed) update list and you'd get notified that the update failed due to a stale

I don't think that would work with most distros, since you're fetching an (also signed) update list and you'd get notified that the update failed due to a stale list, or that the expected updated package was missing on the mirror.