[3836293648]

Nix doesn't require everything to be built from source, sure, but everything downloaded must match a provided hash. What's the difference between downloading source code and binaries at that point?

[ryukafalz]

It's easier to audit source code than binaries, and easier to audit it once than once for each architecture.

[3836293648]

Auditing is irrelevant to whether or not it's reproducable, which was the question here.

You also forgo any improvements to compiler improvements