That seems like a pretty big miss for something that wants to replace distro level packaging. :-/
I haven't read the specs or anything, but a packing format where anyone can upload their application, and we cannot verify the installation script isn't a good idea IMO.