I had the exact same question. What sort of controls will the Tea team have to add/remove packages, or modify owners. And how would this be any different from centralized package managers?
Does your platform have user created content? If so, you will need a delete operation.
Is the technology you use capable of permanent and complete removal of user data? If the blockchain is only for payments, then maybe it is admissable, but there are still further considerations.
This whole thing just stinks of web3 BS and another victim of the cult therein.