I'm not sure who I trust less to handle package integrity, the 3rd party hosting provider that Notepad++ used, or Microsoft.

A little tongue-in-cheek, but it's also an issue with windows, that it's owned by an untrustworthy company.