Comment by fsflover

A distro automatically verifying that installed packages are reproducible would protect the user?