Comment by PLejeck

They do, and they are signed, but they still have issues like this which are so easily mitigated by just using a goddamn server.