Downloading Trezor Suite

Hiello, I have two problems:

  1. I read in the trezor.io website this : You should only trust downloads from our official website or GitHub page:
    Official website: https://trezor.io/trezor-suite
    GitHub: https://github.com/trezor/trezor-suite/releases But the trezor suite installer is downloaded from: https://objects.githubusercontent.com/ I should be absolutely sure I am downloading from the correct site and this does not looks ok.
  2. Also I can not verify the download: “the signature of this message is valid but untrusted” Thanks for your help.