I don't think we need to worry too much about there not being enough xscreensaver source tarballs out there for disaster recovery purposes.

A link to a .tar.gz file published on someone's personal website serving as the only way to access source code also seems a centralized solution.