Can we also challenge this "torrents are untrustworthy" attitude.
Having, successfully so far, resisted/repelled several devious attacks from the Russians, I am keen to maintain a clean, and thus secure, system as possible.
If you don't trust the sha256 hashes, there's no reason to trust a download using https.