I know they didn't, I know they were hacked. The question is how can one be cautious and alert, if that doesn't help? Digital signatures were invented so you ca

I know they didn't, I know they were hacked. The question is how can one be cautious and alert, if that doesn't help? Digital signatures were invented so you can trust the program you're installing, but if that doesn't happen, what else? Also, I didn't update automatically. It was a fresh install on a relatively new machine. And even if I did disable auto update - in that case I would've installed it manually. What's the difference?