Also, are they using reproducible builds? Because without that, there is no quarantee that the same code is in the device. Unless I can build same binaries and verify output binaries cryptographically to be the same.