<i>&gt; Of course, the defense only works if only some of the compilers are backdoored</i><p>I don&#x27;t think so. To my understanding, to become unnoticed by reproducible build, all compilers would have to be backdoored <i>in the same way</i>. That&#x27;s what makes reproducible build so appealing.