Am I being overly paranoid regarding the infection of system updates via a malicious Tor exit node? This happened to Windows binaries.
How difficult would it be to encrypt the transmission of system updates? Are there Debian or third party servers that allow this?