Scene 3 — The Trade
Because the web installer is downloading the package in real-time, users often cannot verify the file hash or digital signature of the actual payload being installed before it lands on their drive. This is sometimes used to sneak in "optional offers" (bloatware/toolbars) during the installation flow that might be easier to spot and avoid in a full offline package.