This is very exciting to me. systemd-sysupdate is a very nice building block for delivering updates, but having some opinionated (and secure) repo system that sysupdate can consume would be very, very nice.