If they’ve compromised the download link they’ll probably adjust the hashes too.