related to issues of false positives like in https://forums.mirc.com/ubbthreads.php/topics/264686/Re:_Just_downloaded_v7.54#Post264686

The download page could include a line offering a link for official checksum, which could link to the latest-news post for that version.

It could have checksums for both the installer and the installed $mircexe too.
It could hold either md5/sha1 for those upgrading from v6, or have sha1/sha256 for those who are upgrading from recent versions which contain the better hashes.

There's even a drag-n-drop page at https://emn178.github.io/online-tools/sha256_checksum.html though theoretically that requires trusting a 3rd party site as well as the integrity of the upload path to it.

The additional link into the Forum would help draw attention to its existence.