Holy crap, that's not everything. I just went to packages.debian.org and clicking on a deb lets you open it with app manager. This is really dangerous.