@Brian Krogsgard - It's a little off topic, but there's also a plugin called Theme Updater that will allow anyone who hosts their themes on Github to allow automatic updates through the use of Git Tags. That way any security patches can be fixed and pushed out even if the theme isn't in the official Repo.

I think that a non-repo third-party service that verifies themes that are deemed "safe" would be useful, especially since a lot of the best themes use non-GPL compliant parts (Shadowbox, Skeleton Framework, just to name a few)