[thriqon]

Yes, if you can acquire or verify the checksum via some other means, e.g. PGP or phone.

To confirm unchangedness-in-transit I rely on TLS.