Download Pages as Attack Surface

Attackers can compromise auxiliary website components or side APIs that serve download links and swap in malicious payloads without ever touching the signed build artifacts. That means code signing and secure build processes are necessary but not sufficient — the distribution layer (website, CDN, APIs) must be treated as part of the trusted computing base. — Highlights a neglected security vector that should shape vendor practices, consumer guidance, and regulation around software distribution integrity.