OpenBSD is a fucking joke!

Today OpenBSD 5.4 has been released ^[1], also known as ``the most secure operating system ever'', or at least that's what the NSA wants you to think!
Did you ever tried to install OBSD? no? well, it's pretty simple: you first go to http://openbsd.org (sorry, no TLS) and click on "Getting releases", then choose some mirror from the list of http, ftp or CVS servers, and now if you want to check the integrity of your download look the SHA256 file that you got from the same place..... wait, what?..
Yup, that is, enterprise security technique! who needs any DSA/RSA signed hash when you can trust: your LAN, your ISP, the tier1 route til the mirror, the mirror itself, and the fUCKING WHOLE INTERNET.

This is fucking ridiculous, do not trust what the media says, OpenBSD is a fucking joke!

__________________

[1] - http://www.openbsd.org/54.html

In all seriousness, is there any way to make sure a malicious individual isn't messing with your OpenBSD packages? Is there any way to get package signing or an equivalent alternative working with OpenBSD? I really don't want to go to FreeBSD, because OpenBSD is so much simpler.