Saying "just use git" seems simplistic. But I could imagine a Debian-like organization that chooses a pool of trusted servers run by independent organizations in multiple countries, where they all have to agree, and with a full transparency log like DNS.