They should put up a checksum for their original version and let people know how to compare it against the checksum of other files.