Rather than a feature being named "controlpanel", it should be named "nexus.controlpanel", as well as signing extensions to prevent loading unauthorized extensions.
This could easily use the GPG key mechanism with public keys added to the root of extension repositories, or into the extension/theme manifests directly.