> Do Debian contributors just upload a binary blob to the Debian servers and that's it?
The practice has either been eliminated or curtailed but, yes, this was done for a long time.
The practice has either been eliminated or curtailed but, yes, this was done for a long time.
It doesn't matter too much... you either trust your contributors or you don't. But it's still a bit icky.