[beeflet]

yes, this is exactly what open source "app stores" like f-droid do: reproducible builds. Also it is pretty trivial to compile it yourself to confirm.

[_Algernon_]

Doesn't matter if the app is just an interface to a web server.

[beeflet]

if it's just an interface to a web server, it should just be a web page not an app

[kenjackson]

Just because I can compile it doesn’t mean it’s the same as what’s being run on the service.

The build and what’s hosted have to be the same.