Hacker News Reader

>How are you going to update if apt is compromised?

Download the package with your http client of choice, install with sudo dpkg --verify -i

many mirrors are also available over https, you can just change that

Basically all of them are, many of the larger mirror servers host multiple distributions, with some defaulting to/requiring HTTPS nowadays anyway.

I’ll just note that you had to go back more than 20 years to get that short list of complaints.