This is such a wonderful guarantee to offer to users. In most cases, I trust the Debian maintainers more than a trust the upstream devs (especially once you take into account supply chain attacks).

It's sad how much Linux stuff is moving away from apt to systems like snap and flatpak that ship directly from upstream.