@gracie @bob IMO debian repos *are* federated. You can set up your own mirror and sync from the main one. If it goes down you can use another mirror. Local groups can (and do) use their own mirror.
Now imagine what a p2p system would look like, where everyone running apt was also part of the swarm. That's the counter-anti-disintermediatisation