Yes, plain text APT repositories (signed with GPG or not) are vulnerable to freeze attacks.