This is correct.Most people use the Auto Update from the webinterface. I assume it does the MD5 check itself.. ?
We are investigating the issue some are seeing.
If you can open a support case(if you havent already), we can try to restart apache on the server, to see if there are problems with the webserver.
I was able to update several installs so far, and no issues like this.