On: Debian apt security update: man-in-the-middle arbitrary code execution

They usually don't.

But sometimes do

What's the argument then? Not signing the packages anymore because that has now been faulty?

There's no sensible argument here.