Telegram publishes its checksum for production apps. Do not trust, verify.
I trust the app, but I have no way to verify what the network backend is doing. Its not meaningfully e2e.