That's assuming you can replicate their build process exactly and that process produces perfectly reproducible builds.