It would be good to support a way to encrypt arguments to be passed to the package or Installer, in a way similar to the one done by DSC for the Credentials. (The problem is the Full MOF is not Encrypted, only creds).
I'm not sure how to make it possible while not interfering with Choco's own Argument handling... food for thought...
https://powershell.org/forums/topic/dsc-secure-string/