Hacker News Reader

A small benefit of downloading the installer is that this lets you run a checksum on it.

Yes, if you can acquire or verify the checksum via some other means, e.g. PGP or phone.

To confirm unchangedness-in-transit I rely on TLS.