I do think a lot of what you are rejecting (automatic updates, centralised package signing, permissions) are solutions to security problems that you might actually have.
I do think a lot of what you are rejecting (automatic updates, centralised package signing, permissions) are solutions to security problems that you might actually have.