So, although it's good at finding accidental mutations to data, it's quite easy to contrive a change that produces a given checksum.

It seems to me that for any hash function, if you only have 2**32 different fingerprints, you can find something by brute force.