awful idea

Not sure where to start. You mean like on Windows where user is responsible for installing and
finding security bugfixes for each software package individually. Or that the software
packages each have their own updater/downloader mechanisms?

Maybe that's not what you mean.

If it's a one-off then there can be a repository set up for a single software package which is
something companies do. Then it integrates with the system tools.