If you download the entire file and verify the signature afterwards, then you’ve wasted a ton of time downloading a file that may not be the one you requested.
This is why large files should be Merkle DAGs in decentralized networks. It provides security against this type of attack.