Thanks thats a much better article with some evidence of poor security. But I still feel the GCHQ claims are not substantiated enough, for example the criticis

Thanks thats a much better article with some evidence of poor security. But I still feel the GCHQ claims are not substantiated enough, for example the criticism that they don't use reproducible builds, fair enough but then who does outside open source? For GCHQ to exaggerate this as shoddy I think shows the true intentions of the review.