> Note that even projects that do monitor build reproducibility like Debian or Arch Linux only do it at a given point in time (when the package gets built) and not backward in time like we did in our experiment!
Arch does have an archive going back to 2016~2018, and we are able to reliably reproduce packages from way back when. Fwiw.