Watching @mjg59@nondeterministic.computer post about trust in computing and being reminded just how little most of "us" (developers, open source advocates, even just anyone with a senior administrative job) understand the amount we've learned about tech over the years. No, people aren't going to check the hash of their downloaded open source binary blob. You don't because you're lazy, or you trust the mirror server you got it from. Most people don't because they don't know there is a binary blob, and you're about 3 layers of understanding they don't want and shouldn't need away from even telling them it exists.