Exactly. Deterministic artifacts alone are not necessarily more secure and are tangential to a lot of what is being described in the blog post.

The blog is mostly focused on hardening the CI/CD pipeline.