They could publish the code , but how do you know the binaries that they are using are compiled against an unmodified version of that source and that they are n

They could publish the code , but how do you know the binaries that they are using are compiled against an unmodified version of that source and that they are not using any other software?