Reproducible builds are the feature that matters most here, 'trust me bro' is not a security model and the manifest kills that whole class of doubt. Same image, same selection, same hash, on any machine, that's verifiable sovereignty. 13 curated tools and they still cut GIMP and Thunderbird, that's someone who understands attack surface
Reproducible builds are the feature that matters most here, 'trust me bro' is not a security model and the manifest kills that whole class of doubt. Same image, same selection, same hash, on any machine, that's verifiable sovereignty. 13 curated tools and they still cut GIMP and Thunderbird, that's someone who understands attack surface