It kinda seems like your example says more about the specific behavior of the MacGPG installer than about the general reliability of macOS's package database.