[ritchiey]

The reason usually cited for why not BitTorrent for software packages is because it makes public what package versions you have and haven’t downloaded.

This information could be useful to an attacker.

[goodpoint]

Hardly. Plus I'd rather have a random bunch of people get a small fraction of such information rather than a single company see everything.

[__MatrixMan__]

Only if you're only seeding what you're using. It would be easy to add an obfuscation layer that seeds more.