yes, but the difference is how high that wall is on the garden. Using an ubuntu/debian type apt based system as an example, it's quite easy and fast to 'trust' a GPG signing key for a new repository and add it if needed.