It's a legal and security question. If I have deterministic builds then the user can verify that the build matches the source. Otherwise it's potentially compr

It's a legal and security question. If I have deterministic builds then the user can verify that the build matches the source. Otherwise it's potentially compromised (or the wrong version).