Funnily enough, Google’s own AMP fails those guidelines when not preloaded and pre-rendered from Google’s own CDN: https://ferdychristant.com/amp-the-missing-controversy-3b424...
Google will continue doing what it does: caching and preloading whatever content it prefers (select publishers, select advertisers) and penalize everyone else even if they follow all of Google’s guidelines to a T.
Web Packages, no matter how well you disguise them as a web standard, will not solve that.
It's not the first (or probably last) time that Big G's said "Do as we say, not as we do."
Heck, the blog post is hosted on WordPress instead of Google's own Blogger.
That made me chuckle, and gave me a sense of how much they value this PR chum. Please, guys; at least make a semi-convincing attempt to pretend you think we're not morons. Hosting a blog post on your own domain would cost you almost nothing. You could even load it up with your own ads to recoup the cost.
From the point of view of a SRE who would have to help configure a server side implementation of web packaging, having yet another http request/response type to build and maintain seems like a bloody nightmare. And OCSP with the signature when Chrome themselves have disabled its use? It also requires custom behavior from the client, all-but-guaranteeing it won't be broadly honored.
And ultimately, I'm confused about how this replaces, or supplements AMP.