Comment by cdchn

Somebody else is building your binaries. You've added another link in your software supply chain. How do you know they haven't inserted malware?