When builds are reproducible, one thing a distro can do is have multiple build farms with completely different operators, so there's no shared access and no sha

When builds are reproducible, one thing a distro can do is have multiple build farms with completely different operators, so there's no shared access and no shared secrets. Then the results of builds of each package on each farm can be compared, and if they differ, you can suspect tampering. So it could help you detect tampering earlier, and maybe even prevent it from propagating depending on what else is done.