The restic binaries are also built in a reproducible way: you just need the source code, go compiler and a Linux system to reproduce the official binaries. That way we (and everyone else) can verify that the binaries match the source code and that nobody has tampered with the binaries.