I wouldn't be sure about most. I and everyone I worked with took gpg verification seriously. I always verify isos. Always. People who are responding to you wit

I wouldn't be sure about most. I and everyone I worked with took gpg verification seriously. I always verify isos. Always. People who are responding to you with "you are absolutely right" might not represent the silent majority (within our field, not talking about normal users).