For example: at the moment a rouge RM could upload a compromised .deb
to our custom APT repo without our process being able to identify it,
so let's not even pretend that we are working towards "rouge RM
resistance" just yet.

Refs: #12629

Fixup against 00430cb5.

Fixup against 00430cb5.

Will-fix: #12629

segfault has some sharp eyes! :)

What was fixed with #8917 was the default folder the file chooser
starts in when *uploading* files.

The 3.0.1 -> 3.2 IUK is broken (Tor won't start, see: #13426) and was
removed.

Fix-committed: #13571