Hmmm, if he cares so much about security he should disable the Universe repository, it's full of security holes. Essentially, installing anything from there is an exercise in installing a backdoor.
Of course, there's not much choice, you want that software to be available. Though choice 😉