The US has been installing packages from source for years. I guess they figured they could fix the dependencies as they arose. They say they're still updating through official channels, but it doesn't seem to be very effective anymore. The few packages it does update can't change the config files because they're so outdated.

Also for some reason, there's traditionally only one kernel maintainer and each one the US brings on keeps breaking userspace