I’m seeing these quite often with people taking the name of the app as “proof” it’s fine. Even if you got it from a reputable source, you should verify the checksum at the very least. Because if you don’t, thinking this stupid feature is stupid, you may just have malware on your system.