Don't wanna interrupt your rant, but "determinism and verifiable integrity" doesn't sound like it'd impede changes.

Determinism/reproducible builds allow independent verification that a source corresponds to the binaries some repo ships. You can set up most languages, build systems, and environment to be reproducible, and once done it doesn't have any additional effects, except maybe when changing build procedures you have to maintain the reproduceability.

"verifiable integrity" to me sounds like computer proof systems. Showing an algorithm/code/program corresponds exactly to some written spec, mathematically.

The project seems to be positioned explicitly against points of authority and "security" through compliance checks and certifications.