Even though current specification only covers the Build track, complying with Build L3 would greatly benefit the software industry.
And future directions[0] include Source track that is supposed to to prevent a single compromised actor or account from introducing malicious changes.