I think it's simple and is what we've been doing. Once it hits the central repo, it's done...no changes to anything period.
The advanced repo manager thing is a workaround for sure, but in an enterprise a very valid and frequently used one. It obviously doesn't help OOS projects, but changing the things in the repos breaks stuff for everyone.
