1) We are planning to support multiple private keys, but currently only support a single key pair.

2) Android doesn't yet support ed25519 but it is coming.

3) We would consider something like this but the question is how that checksum test itself is served. We'll definitely look into improving this. The curl script itself does check the hashes of the installed binaries downloaded from github.