> prove cached binaries are not tampered

Is this not just verifying hashes? What further effort do they go to to prove a binary hasn't been modified?