Isn't this the sort of thing TUF[1] was invented to combat ?

[1]https://theupdateframework.io/