Old school and served over HTTP, making it not that hard for someone to MITM you and give you a backdoored client when you download it.

Don't worry though, the page has checksums you can validate your download against! Except those are also served over HTTP.