related to issues of false positives like in

The download page could include a line offering a link for official checksum, which could link to the latest-news post for that version.

It could have checksums for both the installer and the installed $mircexe too.
It could hold either md5/sha1 for those upgrading from v6, or have sha1/sha256 for those who are upgrading from recent versions which contain the better hashes.

There's even a drag-n-drop page at though theoretically that requires trusting a 3rd party site as well as the integrity of the upload path to it.

The additional link into the Forum would help draw attention to its existence.