I agree with that.
Furthermore, checksums for recoveries are available, for example https://images.ecloud.global/dev/hotdog/recovery-IMG-e-2.0-t-20240508399779-dev-hotdog.zip.sha256sum (just add .sha256sum to the download URL).
Also, an additional tool is not needed if you have PowerShell 5+ installed: [HOWTO] Verify a checksum using Windows 10. Step 1 won’t work with Windows 11, you’ll have to use another launch method.