Comment by raverbashing

apt-get can (and do) check signatures of repos

But yeah, you could put an unverified repos to be used