Welcome to the swamp of code certification testing. If I'm lucky to get sources, I also get a PDF describing the optimization flags allowed, and a checksum of every source file. It depends on protocol and domain, but it is very real.

Blobs are popular for a reason, and it's often for the sake of the user of the blob not the maker of the blob.