Even with repeatable builds there are some ways to exploit the system, for example sending a targetted binary to audience that does not check the binaries, or s

Even with repeatable builds there are some ways to exploit the system, for example sending a targetted binary to audience that does not check the binaries, or sending a malicious update that exports all your history when you won't notice it (at night?) and then sending a good update to cover up. Mozilla has done some research to close these issues [0] but until this is enforced on a system level reproducible builds won't solve the underlying problem. [0]: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency