All the packages in the Package Feed Module are hosted on Flexera’s secured cloud infrastructure (https://dl.sci7.secunia.com). AdminStudio authenticates itself against this URL through a token-based system, so there is no scope for impersonation.
It doesn’t matter if AdminStudio (and the Package Feed Module) is installed on a virtual machine hosted on Azure or a physical machine. As long as it has access to this URL and the token for authentication, it can download packages. The token and URL are embedded within AdminStudio.
