It didn't - I'm mostly curious what people's thoughts are on things. For what its worth, the mirror selection software we're using [1] won't send you to a mirr

It didn't - I'm mostly curious what people's thoughts are on things. For what its worth, the mirror selection software we're using [1] won't send you to a mirror that has a modified file. If a mirror is doing something malicious (and that doesn't catch it), builds are signed and can be verified [2]. Obviously there's some level of trust involved (build infrastructure isn't auditable, android builds aren't reproducible). [1] https://github.com/etix/mirrorbits https://github.com/etix/mirrorbits [2] https://wiki.lineageos.org/verifying-builds https://wiki.lineageos.org/verifying-builds