I also think maintainers should do their best to support all walks on this. Signed, unsigned, repo managed, direct package download, build from source, and signed commits.