You write: "Mullvad VPN loader downloads and starts the latest Mullvad VPN app installer" and then the loader "automatically verifies the integrity and authenticity of the downloaded app [i.e., the installer]".

Doesn't this simply regress the problem of verifying the integrity and authenticity of the installer to that of the loader? What's the advantage for the user of using the loader compared to directly downloading the installer in terms of verification if the user has to verify one application anyway?