Comment by zaphar

There are multiple non security reasons to want deterministic and reproducible runtime environments.

1. Everything you need to describe and build a project is obtained by checking it out.

2. No more, works on my machine but not yours problems.

3. No more weird library dependency conflicts.

I've run into all of these and I find them all frustrating when it happens.