unattended-upgrades man-in-the-middle

Under some conditions package spoofing is possible...