I just want to add "reproducible/verifiable builds" to the open source solution to reply to the "the problem with verifying open source code" comment.
Please take it easy, simply understand what I wrote and don't make assumptions on what I use, is... useles :)