

Because the image never gets built if there’s a packaging error, so the user never ends up on a broken image. A broken package never makes it to the end. If it’s broken the user just doesn’t get an image until the package is fixed and then they get a new image.
It is 100% possible and people have been doing it for years. If the package is broken the final product is never built, it’s impossible to ship it to the end user since it’s one whole complete image.