I wonder if anyone is legitimately concerned that mirrored downloads might contain malicious payloads?