[facorreia]

Even binaries hosted on an official website can be hacked, if they hack the website and change the checksums. It happened to Linux Mint.

https://www.trendmicro.com/vinfo/fr/security/news/cybercrime....

[makeworld]

This is why signing binaries is important.