[pipingdog]

Tangent: I have an earnest interest in learning about methods for installing software obtained from the internet which would be any more secure than this.

[lrvick]

Signed reproducible builds are the bare minimum.

See Arch Linux, Debian, Guix, Stagex