A look at package repository proxies

As far as I know apt-zeroconf doesn't really affect security at all -- you still download package lists from the server and then verify the package signatures anyway, so a rogue apt-zeroconf 'cache' wouldn't do any damage unless you were ignoring package signature failures.

But if the other version works good for you by all means use it! I just have a bunch of machines that are mostly off and I don't care about downloading more when the alternative would be to walk over to another house and switch on a computer ;)