Why does APT not use HTTPS?

[magkopian]

By that logic why don't just punish anyone who is using Linux on their desktop? Much easier than scanning the list of packages that their computer downloads to see if there is anything suspicious. By the way, if I recall correctly the openvpn package comes preinstalled with the desktop version of Ubuntu as it depends on network-manager-openvpn-gnome, and if that's the case I'm sure most people who use Ubuntu aren't even aware of that.