When downloading compiled binaries for programs it is very important to check GPG signatures, Authenticode, hashes, etc.
However, I often see people who say that compiling the code from source is the most secure way.
If they have read and understood every single line of code, then I can see how this would be the case.
However, for projects like Chromium or the Linux Kernel, I highly doubt that anybody in the world has read every single line. Even if they did read every single line, a backdoor can be as small as one character, so they'd better have read it damn accurately.
Is compiling from source really more secure than downloading the unverified binaries?