I think part of the issue is how business accounting practices work. When you buy a machine, you can call it a capital investment and count its value as an asset. When you hire a person and cultivate them for years, from an accounting perspective their salary is strictly a liability / expense. Even though that person is an asset in every other way, our standard accounting practices don’t reflect that.
I think they did say that in the older thread. But for proper security, you shouldn’t have to trust them. You should have build tools that will re-fetch everything to create an identical build. That gives a clear chain of custody, which proves that morning has been tampered with.