In T320551: Package OpenTelemetry Collector as a .deb we decided to directly import the upstream-provided otelcol-contrib deb.
Ideally we'd be building our own distribution of the collector, with a minimal set of modules (see T320551#8313913).
And also we should be establishing some trust between the upstream-provided code & artifacts and automatically validating that while building (see T320551#8324910).