Weirdly, Chris does have a GitHub repo for it, which would be way more secure for serving downloads, but it's not mentioned on the download page. We're also assuming that Chris is trustworthy and has not included a malicious payload into this file, in which case it wouldn't matter if the file is correct - it would still be malicious.

My advice is don't run things you don't understand or that people you trust have not vouched for. If you use Linux, you inherently trust your repository maintainers to not serve you malicious code and to audit the packages they are maintaining, so you can be delivered safe software from secure repositories without needing to understand every line of code. This isn't 100% bulletproof, as we saw with the XZ Utils backdoor, but it's a hell of a lot safer than piping things raw.