Instead we can vigilantly monitor Loki’s source code changes, and also they can post checksums for their compiled clients and we can see if they don’t match what users receive if they download or compile on their own, and we can also see if Loki stopped posting checksums.