What I was told is that you could change the ISO to have malicious "things." Having approved FTPs means you'll get the freshest packages and won't be getting any unwated, "evil" packages.
And that's not my opinion, that's what the folks on IRC told me!