The problem is that this value can be compared to a list of "allowed" values. Therefore it opens the gate to creating software that would require only certain "whitelisted" systems to run it. Such list can be easily updated automatically once those "whitelisted" systems update. Therefore an argument "updates would break it" do not actually work.
This is precisely how play integrity works on android. And Poettering intensions do not matter much. His system can be used like that and therefore it will be used like that.
I do not understand where does your optimism come from? In what little that we do know they describe the exact same system using the exact same wording as google. If they mean some other thing then they should spend a couple of hours and describe how is it different. And before that the worst should be assumed. It is to dangerous to treat it in any other way.
I do not care if it is connected to proprietary ecosystem or not. The freedom to decide what software am I allowed to run on my PC is important for me though. Any system that limits that freedom is evil by definition.
They want to create a mechanism for software to determine on which system it allows a user to run itself. Google "play integrity" on android and google's proposal for web integrity API.
Russian law requires for an alternative market and some goverment approved apps to be preinstalled. And since google refuses to certify certain Russian developers and is banned in Russia it would mean that smartphones would be required to be degoogled to be sold.
As a Russian I would say that in 2022 their were similar actions against Russians as well. The only thing it achieved was boosting Putin's rating and hate towards the west. So, if you want Netanyahu (and alike) to rule forever this is exactly what you need.
But saying that xbps-src is like the AUR is very misleading because it lacks the "U" part.
It is misleading because AUR is a repository, but xbps-src is not. It is a tool like makepkg in arch. One could argue that xbps-src is a more advanced tool as it also acts as a package manager itself.
A repository that is most commonly used with xbps-src is void-packages which is maintained by void teamm one could build a repo for xbps-src like aur, but to my knowledge it has not been done and is unlikely to succeed any time soon due to a smaller user based compared to arch.
Hello from XMPP. Now you understand how we felt.