Best of both worlds: let the checksums be a quick way to verify the download but offer full integrity using the signatures for the uncompressed images in case the uncompress is buggy.