With their signatures, commit hashes and distribution networks you trust (such as distro maintainers, for instance). You most likely already do that without an

With their signatures, commit hashes and distribution networks you trust (such as distro maintainers, for instance). You most likely already do that without any sanctions that affect you.