Yes! KeepKey firmware has a deterministic build process. The community is able to audit every release KeepKey has made over the last 9 years.