There have been cases were official download servers have been seeded with bad payloads, I think it is usually solved within a day/week. So some time between do

There have been cases were official download servers have been seeded with bad payloads, I think it is usually solved within a day/week. So some time between downloading and comparing those hashes is probably a good factor as well. Automatic software installation is really a great way to have a backdoors into systems.