It's kind of funny because now you're trusting some third party not to inject unwanted code when you just blindly download binary on every release anyway.

Seems to just bring another problem by trying to solve one.