yeah, i agree with that. i mostly am not cool with tiller being an unauthenticated-by-default service in your cluster that can install software with cluster-admin. there is also no standard for repositories and no established process for content trust. there is also no productionalizable way to use helm to manage upgrades and lifecycle.