If you decided to use an umbrella to protect something during a hurricane and umbrella breaks and your thing is ruined. Whose fault is that?

Distributing signed artifacts is a solved problem (until NP=P is cracked at least).