The problem is that currently, it is not much different than trust me bro, unless reproducible builds of the full backend image are possible.