The post also mentions this is only a problem because of closed source, I think "I want to keep my government identity private, but here's the source code" would be a fair compromise.
If one wants to be extra "there's nothing up my sleeve" they could also publish instructions for how to do reproducible builds for the compiled artifacts (which does require publishing the source code however).