Fedora is centrally built/signed and not part of the reproducible builds project. It should not be used for any systems you need to be able to trust.

You are much better off sticking with Debian anyway, or looking at Guix for a significant improvement.