Said malware would also have to be code signed with the 7-zip authors' code signing certificate. However, if you're downloading it for the first time, you would

Said malware would also have to be code signed with the 7-zip authors' code signing certificate. However, if you're downloading it for the first time, you wouldn't know what that correct value is.