Comment by fsflover

Not really. Debian repositories also contain zero malware, and I don't think they audit evert package and every update.