@Foxboron @dch @mjg59 Trusting Trust is a "solved" problem for the general case. It's just hard work to solve it in each specific case, but bootstrappable NixOS and Guix are a thing now and solve 95% of it, while still relying on a machine with firrmware and Linux. But it doesn't even have to be a close to 100% solution for Trusting Trust to apply.
If you can give me human-readable and understandable source code that compiles under more than one independentently developed compiler, or under at least one free software compiler, that's already far better than a binary and "trust me, it does what I claim it does".