Comment by dinosaurdynasty

> preventing a mitm from knowing what packages you install

Package size is unique enough that just seeing the size of the transfer will usually be enough to tell.