The shasum check is recommended to ensure the binary you are installing and using has not been changed by attackers. Its especially very important in CI/CD tools where automation is used to download tools from public internet.