[parliament32]

The main recommendation is "always serve your apt repo over TLS", however, apt doesn't use TLS by design: https://whydoesaptnotusehttps.com/

[jdamato]

The website you linked to has several factual errors, as explained in the article.