Reproducibility is the thing that bothers me most about auto-downloading build systems. On the other hand, Cargo (IIRC) doesn&#x27;t do what Maven does: if you say you want version X, you get version X or anything newer (unless you jump through hoops that I&#x27;ve never seen anyone jump through).<p>[Security just scares the piss out of me in general; downloading binaries is probably the smallest problem.]