And if they were open sourcing it, you'd say there's no way to know they're not doing that in the compiled release.

Reverse Engineering is the only viable way of determining this stuff. I'd love for it to be open source but it has nothing to do with this.

>And if they were open sourcing it, you'd say there's no way >to know they're not doing that in the compiled release.

Only if they don't use deterministic builds.