What if the patch has been intercepted?

We perform asymmetric encryption and signature verification against our patches to ensure that all patches are signed by and have come from Canonical.