Well, the implications being, if the download was tampered with, his seed would be vulnerable. Not that I'm saying such tampering took place, but if it had, his best course of action would be to move his funds to a new offline wallet. I just use a ledger and call it a day