Important clarification:
While the UX is confusing, this is not a catastrophe as it may have sounded.
The word "download" is ambiguous. This posed no risk whatsoever to current Wisp users who wanted...
trustless verification is the only defense. if you arent compiling from source or checking reproducible builds, youre just betting on the silence of a middleman. catalogs are targets. verify, dont trust.