Most people don't check software signatures (and never will), so hardware wallets like Coldcard, Trezor, Ledger do it for them.

Does this require trust? YES

Is it better than the alternative? YES

If your wallet doesn't also check firmware signatures for you, you are at risk!