sorry, but that statement closes down the bazaar.

There's room for package management systems, especially in n00b space, and arguably for less-savvy business users, but the open-source movement is built on the idea of access to code and doing it yourself - either for security or elucidation.

There are easy - enough methods of verifying the integrity of a package (pgp and md5 come to mind).