VeraCrypt concerns

Well… Why VC still downloadable only from website? It feels like microslop experience, where you need to go to various websites to make something work and pray not to catch malware

Also VC even doesn’t have official PPA. So you cannot just apt update && apt upgrade.

With website downloads you need to manually check sign/hash of downloaded file, when apt does this automatically.

Moreover, what stops devs to host repo instead of file dumpster to at least do something like LibreWolf did? They already have downloadable files on their server, so adding custom repo shouldn’t be a pain…