I wish the project would set up a Let's Encrypt or other TLS certificate

Yes, the lack of https access has caused concern for quite a few (including me).
They do at least provide SHA1 digests for their releases.

Oddly, their home page is still stuck on 5.30.2 and makes no mention of 5.30.3 availability.
I guess it will update soon.

Cheers,
Rob