The signatures and checksums do not verify that what is in that build is what that person says is in the build. You are still trusting on that.
The signatures and checksums do not verify that what is in that build is what that person says is in the build. You are still trusting on that.