Incredibly, there does not appear to be any way whatsoever to securely verify downloads from respected openSUSE. That seems not only incredible, but plain fals

Incredibly, there does not appear to be any way whatsoever to securely verify downloads from respected openSUSE. That seems not only incredible, but plain false. OpenSUSE offers PGP-signed checksum files prominently with the images. It also provides the signing key's fingerprint over HTTPS. When choosing the regular releases you also get some verification instructions. This is not true when picking the Tumbleweed rolling-release distribution. In either case, though, the checksum files are signed.