[rbanffy]

The part that made sure the user could update the package could have at least check if the payload is about that package before passing it to the service that trusted it.