I should say I haven't verified the signature for electrum as whenever I run it on Windows my AV tells me who signed it (I think it's the AV anyway).
LOL. Honestly I never thought I'd be so paranoid about installing anything before. I'm *not* naive when it comes to computer security I can imagine *so many* attack vectors I'm scared of everything.
Not sure realistic some of them are, but BTC is a ripe, ripe target ya know.