The vast majority of data shared over bittorrent is not executable. So your scenario becomes an issue if you're downloading executable data that you deem :trus

The vast majority of data shared over bittorrent is not executable. So your scenario becomes an issue if you're downloading executable data that you deem :trusted: without any additional verification besides the hash itself. If that's the case, you have bigger worries than the hash.