Comment by brookst

The end user protection is to sign updates and publish the fingerprints. It should not be possible for one device to get a different binary than everyone else.