Comment by realusername

Reverse engineering is a separate skillet on its own, on top of the other ones you need to read the source code and good developers aren't necessarily good at that.

> After all, you wouldn’t actually be trusting the source code given to you to match what’s running on your device, would you?

That's why the best practice in the industry follows reproducible builds.