[krageon]

Given that Signal doesn't have reproducible builds and may therefore have absolutely anything inside of it's distributed binaries, I'm not sure if this is meant to be a good or a bad example.

[lorenzhs]

Signal for Android has had reproducible builds since 2016: https://signal.org/blog/reproducible-android/

[krageon]

It says it does not right on that page.