Nix is another route as far as a compile-from-source package manager with lots of options on many packages.
The security argument for recompiling from source is addressed by the input addressed (sic) package cache. The customization aspect is mostly covered by Nix package overrides and overlays. You can also setup your own package cache.