I always thought the reproducible builds mantra was "trust but verify",
not to actively distrust?