Dosent really help if I can just go into their system and introduce my own code into their SDKs or just sign my own release of a build. It just makes me questio

Dosent really help if I can just go into their system and introduce my own code into their SDKs or just sign my own release of a build. It just makes me question how secure their build process is? Without security people you cannot claim to be secure?