Current Whonix flaws and implementation musts for Whonix 2.0

i noticed error in alpine wikipedia u sent

“end-to-end signed packages (not only repository metadata) (such as end-to-end signed .debs

this comparsion makes no sense as you cannot sign large files, you can only sign the files hash (metadata)