ICG is for moderation and privacy, this is mostly focused on security. I need to clean this up sometime later.
The commit worked around an 0day backdoor in upstream, masking it as improve reproducibility by running autogen.sh ourselves. Most Arch systems were not affected by the 0day as it was primarily targeting Debian and RedHat, however that does not change the fact the presence of the backdoor in older Arch systems was hidden.