"an ISO image is incomplete, often outdated, and potentially insecure" is simply not true. If we use the --layout option to download the package for offline installation, the packages can also be "incomplete, often outdated, and potentially insecure" after a while.Worse yet, because it's just a folder, people can add/remove file from the offline installation folder.