[cortesoft]

That just makes DNS the single point of failure. If you own DNS, you can change the checksum and the download all at once.