@mcc Distro package managers are the distros. They allow maintainers to curate what software is available, what it's default configuration is, to ensure it is safe, and that it follows their (distros) policies. If something contains or requires non-free stuff, contains malware, adware, or tracking stuff, they are to decide what to do about it (remove / not include the package, disable it, allow it, etc.). It also allows updating systems as a whole, to resolve all old security vulnerabilities.
