2 ms·

Technically GitHub releases can be signed, but even then you're trusting the release build bot most of the time...