I will add, once the image is on disk indeed the integrity is not verified so it can be modified after pull either maliciously or by accident. Once pulled, the

I will add, once the image is on disk indeed the integrity is not verified so it can be modified after pull either maliciously or by accident. Once pulled, the content addressed layers are extracted into the storage driver (overlay, btrfs, whatever).