Does that mean blind trust in apt repositories?