Yup you should do your research. I did mine. But it’s basically anyone can compile the software from source code using the GNU Guix environment and generate an installation binary that is bit-for-bit identical to the official release.
Only bitcoin core and Debian has that.
Rest most projects like sparrow are written in java so can’t have this as it’s run on sandbox.