“Next goal: 100% reproducible GNOME ISO”
Reproducible means anyone can rebuild the installer from source and get the same bits, byte for byte. That is the real defense against a poisoned build server. Most vendors ask you to trust their binaries. NixOS now lets you check.