Theory: it makes secure builds that much more straightforward. You can just point goma at a repo and whatever it inhales is everything needed. The simplicity ca

Theory: it makes secure builds that much more straightforward. You can just point goma at a repo and whatever it inhales is everything needed. The simplicity cascades downwards. For example, "everything comes from a repo" would make object (.o) caching that much more straightforward. And you can reason both about the logic behind a service and how it was configured from a single commit hash/CL.