> By definition you can't protect yourself from the entity that provides you the software you use, because you have now way to guarantee that they aren't going to backdoor you.

Well that’s just wrong, just make it open source and do reproducible builds