[anarcat]

i don't think the security model of package-install is good enough for my thread model. (to be fair, i still package-install some stuff, and, yes, with use-package, but i'm trying to eradicate that practice.)