Isn't the package supposed to avoid this, and in fact install all binaries?

By default, package-builder uses the osqueryd and launcher from Kolide’s notary servers. This is overridden if you specify a local path for the

-osquery_version

flag. Run

package-builder make -h

for all of the flags and their descriptions