The symlinks are pointing at things produced deterministically by upstream products, then this should be safe