Our machines don't usually (and shouldn't) have `testing` sources.list. This means that filtering on `testing` should not lead to upgrading the whole world when testing changes, because the sources.list will not be there to allow it. For that reason, I don't actually se a problem with using `testing` in this case.