Fortunately that will change for Debian, and, we can hope, Debian-based distributions.

https://wiki.debian.org/ReproducibleBuilds

(I gave a talk about this at CCC. The status quo is a reason why free software doesn't have some of the transparency benefits over proprietary software we might expect, if you fear some developer is attacking you or someone is attacking some developers' infrastructure.)