[arccy]

is it really open source when you have to use the binary builds from signal through the app stores? it could be like the xz attack: clean source, bad binaries.

[jerheinze]

This has been a solved problem since 2016: https://signal.org/blog/reproducible-android/