git is as prone to bitrot as hg.
git doesn't run fsck on the entire repo for each operation, and unless you fsck or clone you won't detect corruption for quite a while.
it's exactly the same for hg, which is built on the same hashing concept as git (actually the other way round, as hg came first).