Yeah, if you read through the details for ColdCard it's showing that there was an effort to make the build reproducible, but they haven't analyzed it since then.