Which is why they push you towards not using the website, and also explain how they (through some steps) put their application version's hashes into the bitcoin

Which is why they push you towards not using the website, and also explain how they (through some steps) put their application version's hashes into the bitcoin blockchain. And the client is open source, which iirc includes being built by distribution's maintainers/build servers instead of Keybase.io.