On: Backdoor in upstream xz/liblzma leading to SSH ser...

[bhaak]

If the compiler is some customized or hard to build version then yes, they should be included.

The more steps you add to get to the final product the more likely it is to run into problems.