Lacking software (apt) is a security issue. Having software installed (tcpdump) is also a security issue.