Well, this will provide signed binaries and a "native" (to the browser) update service that doesn’t rely on a third party to update it.

Librewolf breaks trust (for lack of a better term) by not offering both of those options.

You just have to assume the binary you download isn’t compromised (maybe you could argue checking the hash is enough) and that the third-party updating service won’t serve you a compromised update.