2. Don’t homogenize all the platforms.
3. Reproducible builds; in all likelihood the build server was compromised.