You'll notice
The Windows copy-based launcher installer refuses a launcher binary that does not match its signed checksum.
The Windows fallback copy-based launcher installer now accepts an expectedChecksum and refuses to install a launcher copy that doesn't match its signed checksum, logging an error and returning "failed" instead of silently installing a mismatched binary.