Language packs, and really any other supplementary code, should be in the core directory instead of the data directory. I'm told the reason for this is security but sane filesystem permissions and not explicitly allowing injected code uploads would negate this concern. It makes more sense to have such things in Moodle core for a bunch of reasons but the most useful one is scalability of source code across multiple servers, which is of particular importance to moodle.org.