Redownloading everything isn’t a risk when the lock file contains a hash of the download on first update.