> You can't even verify the build you get off Github was compiled from the same posted source.

You don't need to because you compile it from source yourself