Thomas Rast [off-list ref] writes:
So what's wrong in this thinking?
We tolerate giving occasional false positive "Yes" to "Has this changed?",
but do not allow false negative "No". So the value st_{ino,dev,uid,gid}
gives us is strictly "these are not likely to change, but if even a single
bit in them change, we need to suspect that it may have changed." The
primary field that protect us is mtime, and all the rest are more or less
belt-and-suspender safety.