Well, not necessarily. I mean, a repo could be hacked.
Fortunately, apt uses signed packets.
Repo security is certainly very important. But well, ultimately you have to trust someone?
But I guess that there are two ways to feel really secure : either use openbsd, or just don't use the internet.