The issue about verification still remains. We have no way of knowing if these haven't been tampered with as well. If a malicious actor is tampering with ISOs on a large scale, they will make sure their tampered copies have the most seeds and their fake checksum lists will be at the top of search results.
not really. 90% of people using the cheapest vps are going to host wordpress or crud apps on there, not their video streaming startup that competes with youtube.