Hacker News Reader

FWIW, the current version of element (X) is published as a reproducible build on f-droid. https://f-droid.org/en/packages/io.element.android.x/

The attack on xz illustrates that even if the code is open source and the build is reproducible, well-designed attacks can still be executed.