package installed with nouser and nogroup perms, just id 999

[Justa User]

Binary package hint: gtk2-engines-aurora

Shouldn't these files be owned by a real user and group to prevent any possible tracking/future ownership and potential security issues? Using most recent distribution release and gtk2-engines-aurora Version 1.5.1-1 0:

ls -al /usr/share/themes/Aurora/gtk-2.0
total 20
drwxr-xr-x 2 999 999 4096 2010-05-02 12:33 .
drwxr-xr-x 4 999 999 4096 2010-05-02 12:33 ..
-rw-r--r-- 1 999 999 12045 2009-05-15 06:05 gtkrc

sudo find / -xdev \( -nouser -o -nogroup \) -print
/usr/lib/gtk-2.0/2.10.0/engines/libaurora.so
/usr/share/doc/gtk2-engines-aurora
/usr/share/doc/gtk2-engines-aurora/copyright
/usr/share/doc/gtk2-engines-aurora/README
/usr/share/doc/gtk2-engines-aurora/NEWS.gz
/usr/share/doc/gtk2-engines-aurora/AUTHORS
/usr/share/doc/gtk2-engines-aurora/changelog.gz
/usr/share/themes/Aurora
...