i have some really sick proprietary buck2 nix integration stuff that i can't publish yet due to logistical reasons (it's not secret stuff). i also shudder to think how one would e.g. do toolchains for nixpkgs builds, etc. it seems like a massive headache best resolved with non-hermetic toolchains but then you lose remote builds, it's all kind of tangled together sadly.