Earlier quoted context omitted.
Can you verify the binaries by reproducing them and comparing hashes? (obviously not of the whole binary but maybe some portion) That would protect the users of those binaries.
Deterministic compilation isn't commonplace yet. I'm not even sure if it's really usable at all yet. Generally, we rely on signed binaries.
So the signature gives you confidence because you trust the signatory?