Imagine someone downloads a program, and no one can ever check how it was really built. If we made bootstrappable builds a rule, at least there'd be a chance to catch a backdoor. I know it is a lot of work, but that trust seems worth it.