[yjftsjthsd-h]

To be explicit: This depends on the app store only allowing CI builds, since otherwise you can't trust that the binaries match the source.

[swiley]

Or allowing local builds with including custom patches. Giving people agency over the machines that run their lives is way too radical to be popular though.

[JackeJR]

This is the approach of fdroid which is what imo makes it trustworthy.