> You mean it shouldn't happen by accident unless the user accidentally
> added the Inbox to a package, of course.

Given how many gestures are required to add a repository to a package,
that would not be an accident.  A mistake, maybe, but not an accident.