Support standard Aptitude for all system updates w/o the need to run Barracuda

Per my comment on "Should I run aptitude full-upgrade or is that handled via Barracuda or Octopus?" in the the BOA group:

Just wondering, perhaps for the 'wishlist': Since Man page, fonts, grub and kernel stuff has hooks that run after an aptitude update, I wonder if it's possible for Barracuda to add its own hooks so that if the vulnerable parts (NginX, PHP-FPM etc) are updated, a script is run to get the latest and recompile? Would make it largely bomb-proof, though I don't know enough about Aptitude to know if it's possible. Any thoughts?

I see there are http://wiki.debian.org/DpkgTriggers which would allow Barracuda (or part of its script) to be called to auto-recompile NginX & PHP-FPM only if a sub-module or related package was updated...

This would be a great feature and would mean server admins can just run apt-get upgrade or aptitude full-upgrade as they would on most other systems, safe in the knowlegde their webserver will be recompiled and fixed by Barracuda if deemed necessary by the system.

Is this a good idea? I realise this is specific to Debian and its child distros, but would be fantastic to avoid needing to run the script for simple package updates to a server.