The answer is to use apt pinning. This can a) prevent newer Debian packages from overwriting pureos packages and b) if the priority setting is low enough it will even uninstall Debian packages for pureos packages even when that means downgrading versions.
Sorry commuting now and am only on a phone, so can’t provide links, but Google for apt pinning on the Debian documentation.