What is good (and often overlooked) about package updates over HTTPS is that you don't leak metadata about which packages you are updating or installing. Not a big issue with an office suite but still it's an option I would prefer.