[captn3m0]

Not a very good idea, for the very reasons you point out. Signed releases with public keys, as conradev points out below is the far better approach.