Without some sort of reproducible builds (which are really finnickey to actually get) this doesn’t really help though. Adding some set of malicious patches before doing the binary release is trivial.

600k seems a bit too much. That’s a fairly large city.

Ultimately, even for me as someone who cares about it, it’s just become one of those things that I don’t prioritize. Life is hard and at some point I’d rather get something cool done with gmail reading all my private conversations than struggle with my own email server.

Not saying it’s a great choice but ultimately life is short and we need to focus on doing what feels right. People have to pick their battles and that’s life.