In a sense, Guix also has some risk in case someone takes down a source package. Guix has a cache of packages on Hydra, so it's unlikely we'll totally lose things entirely for current packages, but for older versions of Guix, history may bitrot away.

Content addressed storage may be the right and necessary answer indeed.