@MegaMichelle @hipsterelectron Usually package managers do: read from net, write to local disk, another read from local disk and verify checksum/signature, another read to decompress and write. So 3 reads and two (1.5) writes of the same data.
Idea in apk is: one read from network, calculate checksum and decompress while waiting for network IO, write extracted file to temp file in target dir. verify checksum/sig and rename. 1 read 1 write.