Might be a crazy idea - but what do people think of repository owners compiling from the source code? Like Valve / Canonical could do it and put out binaries. Obviously there would be agreements about the security/management of the source code. Maybe it could even be done cryptographically so that no source code needs to be visible outside some kind of building machine.