Not sure why this was donvoted. This is a perfectly valid complaint.

The download isn't HTTPS

The archives aren't signed.

And having to start some custom installer script is also not really trustbuilding. (Why can't the program simply stay within its folder?)