It always bothered me that apt didn’t use encryption, I know the issue here doesn’t boils down to that, but damn this sucks.

Sure I can update, but how to check I want compromised? Will apt check the state of past/installed updates?