Comment 1 for bug 1990378

options from IRC discussion notes:

* download yourself -> big no no, don't want reimplementation of metadata verification
* run a private apt instance and hide the output -> you just hide the failures, but you still end up talking to the server or failing.
* debconf prompt to add sources.list entry -> terrible UX to ask everyone
* check that esm.ubuntu.com is reachable when installing package -> sounds reasonable to _me_

Further discussion warranted.