@lukeshu @amszmidt @lxo @vagrantc
IOW, without bootstrappable builds and reproducible builds, it's impossible to prove the absense of a "incomplete source code bug".
Without bootstrappable builds/reproducible builds, having "some source code" available cannot give any guarantee of software freedom when using this program.