Aren't you forgetting the fact that binaries aren't provided by the project itself? They come from contributors (in the project's words: 'anyone').

That's wildly different from the typical CI-built binary.